Wireshark · Wireshark-users: Re: [Wireshark-users] One NIC on public side

["Boonie" <newsboonie@xxxxxxxxx>]

The other option is to attach the hub to the span port and attach the 
monitor devices from there. You allready have the equipment for that.

This does not interfere with the normal trafic and if your monitoring PC is 
not sending and data (reverse dns queries?) there should also be no 
collisions.

Dave



----- Original Message ----- 
From: <mike@xxxxxxxxxxxx>
To: "wireshark-users" <wireshark-users@xxxxxxxxxxxxx>
Sent: Thursday, May 13, 2010 6:52 PM
Subject: Re: [Wireshark-users] One NIC on public side


> Are you sure you want tu run all traffic through a hub? This might lead to
> packetloss due to colissions.

It's a temporary setup so that we can get a number of services going right.
So far, we don't see any packet loss or terrible quality loss and we're even 
passing voip calls through the setup.
We were using a switch with port monitoring but because we had multiple 
devices which needed to monitor the traffic, we ended up using a hub for 
now.

The setup I'm talking about is...

WAN-Routers----Hub----Firewall----switches----etc

The wireshark and other monitoring systems are connected to the Hub.