If
you are serious about network monitoring and analysis – Get a TAP…..
Otherwise
every packet you see has been modified in time, all bad packets have been
dropped as well as short or long ones, so baseline studies and timing studies
are not available with a switch.
One
pays thousands if not millions for a network…even in your home –
use a TAP or it is just not real !
Saw
2 0r 3 on Ebay…just do not waste the money on a switch unless you
understand what it is doing to the data/packets.
Good
luck…
Tim O’Neill - The “Oldcommguy™”
B.T. Solutions, Inc.
Phone – 770-640-0809
Website - www.lovemytool.com
e-mail – Tim@xxxxxxxxxxxxxx
Please
honor and support our Troops, Law Enforcement and First Responders!
All
Gave Some – Some Gave All!
From:
wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Jake Peavy
Sent: Friday, April 09, 2010 8:25
PM
To: Community support list for
Wireshark
Subject: Re: [Wireshark-users]
Looking for a portable sniffing-friendly hub/switch
On Thu, Apr 8, 2010 at 6:17 AM, RUOFF, LARS (LARS)** CTR ** <lars.ruoff@xxxxxxxxxxxxxxxxxx>
wrote:
Hi,
i was looking for a "portable" (i.e.reasonably small and lightweight)
solution of a capture-capable hub/switch on the wiki pages:
http://wiki.wireshark.org/HubReference
http://wiki.wireshark.org/SwitchReference
But found out that most of the stuff is either not for sale any more (the hubs)
or does not fulfill the "portable" requirement (the managable switches).
During my following web search, i stumbled upon the Netgear GS105E:
http://www.netgear.com/Products/Switches/PlusSwitches/GS105E.aspx
which seems to be the perfect fit in terms of size/prize/functions.
It is in fact a mini-switch that can do port-mirroring according to the specs.
The question i have is if anybody already tested this device and can confirm
the port mirroring capabilities. Especially i wanted to know if it is possible
to mirror outbound only, so as not to disturb the host network.
Second question is if anybody can recommend another similar device of
equivalent price (around 50 EUR)?
Gigabit is a must, PoE would be nice to have too, but i don't expect it within
that price range.
We use a Cisco 8-port managed GigE switch which supports port mirror (and can
be PoE powered if that's interesting to you). It's worked great for us.
SLM-2008: https://www.cisco.com/en/US/products/ps9996/index.html
--
-jp
Any man, in the right situation, is capable of murder. But not any man is
capable of being a good camper. So, murder and camping are not as similar as
you might think.
deepthoughtsbyjackhandey.com
