Wireshark · Wireshark-users: Re: [Wireshark-users] Multiple Monitors/Sniffs of the same source

[Kevin Cullimore <kcullimo@xxxxxxxxxx>]

On 5/21/2010 11:57 AM, Guy Goodenough wrote:
> I've read a few threads on the list here talking about portable network taps, how to wire them and so on. However I haven't read anything or found much information on the web about having the source traffic from a SPAN'd/Monitored port to multiple destinations.
>
> I have a NTOP/Snort installation on one machine and a Websense installation on another. They both need to log/see the same traffic. Is there a device or a way to have several targets monitor a single source?
>
>    
If you choose your intermediate-system (switch, basically) vendor 
carefully, you should be able to specify a destination vlan.
> Thanks,
>
> GG
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list<wireshark-users@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>               mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
>
>