Mijn Werk: januari 2012

Port Mirroring is sending a copy of all the packets received on one or more ports of a switch to another designated port of the switch. It's like having mirror images of packets being received on source port/s of a switch without disturbing the original flow of traffic.

Port mirroring is the most effective way of monitoring the flow of traffic across a switch. Port mirroring is one of the a basic requirement for many network monitoring and network security tools such as IDS Sensors. Port mirroring also helps a lot in trouble-shooting network related issues.

Port Mirroring is also called as (SPAN Switched Port Analyzer) or Port Monitoring.

Also on Netgear http://www.caworldwifi.com/Netgear-5-Port-Gigabit-Switch.html

Meer lezen »

Hubs vs Switches – Using WireShark to sniff network packets | Chipkin Automation Systems - Articles

Hubs vs Switches – Using WireShark to sniff network packets

Gotcha #1 : Use a hub not a switch

Why: Switches don’t copy all messages to all ports. They try and optimize traffic so when they learn which port a device is connected to they send all messages intended for that device to that port and stop copying to all ports. (The jargon they use for this function is ‘learning mode’)

How do you know it’s a hub: Just because it calls itself a hub doesn’t mean it is one.

If it says full-duplex in the product description it’s probably not a hub.
A switch that allows you to turn off the learning mode is effectively a hub.
A switch with a monitored port copies all messages to the monitored port and thus you can use that port as if it were a hub.
If it says ‘switch’ and you cant turn off learning mode and it doesn’t have a monitor port then it is not a hub.
A router is never a hub.

Meer lezen »