LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
LinkBack Search this Thread
Old 10-30-2006, 07:26 AM   #1
rlocone
LQ Newbie
 
Registered: Nov 2004
Location: Starbase 575
Distribution: Gentoo
Posts: 21

Rep: Reputation: 15
Question Installing a Network tap


Hello All

I'd like to install a network tap on my network to monitor traffic. what package is best to perform this task? Is this the best way to install the tap?

firewall
Green interface --------> net tap -------> Router

thanks,
 
Old 10-30-2006, 07:31 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,344

Rep: Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945
well a network tap is a hardware doohickey, not software, you would make up a special network adapter which contains multiple wires on the TX ports on a certain interface. if you want to do it in software then you can run an app like wireshark on either box if they are running linux of windows
 
Old 10-30-2006, 07:37 AM   #3
rlocone
LQ Newbie
 
Registered: Nov 2004
Location: Starbase 575
Distribution: Gentoo
Posts: 21

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by acid_kewpie
well a network tap is a hardware doohickey, not software, you would make up a special network adapter which contains multiple wires on the TX ports on a certain interface. if you want to do it in software then you can run an app like wireshark on either box if they are running linux of windows
Thanks, wireshark is what I use now. I know and read that it's hardware that can do it. I assumed that I can build a box and drop in 2 nics in it. One of the nics would be point a, and the other would be point b. You'd capture traffic between points a and b. There has to be some kind of software that would do this? In essence creating the tap, (network monitoring PORT). Network General has these boxes, I've seen them in production for upstream and downstream traffic. I'd like to build a linux version.
 
Old 10-30-2006, 08:15 AM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,344

Rep: Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945Reputation: 1945
well that's a bridge. a tap is a 100% monitor only, at electrical signal level. if you install a box and just configure two nics with the kernel bridge module you'll basically have a 2 port switch. then you can just run wireshark against that single bridged interface, br0.
 
  


Reply

Tags
network, packet, sniffing, tap


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Using Tap Interface Kenji Miyamoto Linux - Networking 1 02-05-2006 04:12 PM
help using tap device sunnos9 Linux - Networking 0 05-01-2005 12:18 AM
Tap Drive imsajjadali Linux - General 9 02-07-2004 06:12 AM
Position the tap drive imsajjadali Red Hat 0 02-07-2004 05:11 AM
Tap Drive imsajjadali Linux - Distributions 2 01-26-2004 06:02 AM


All times are GMT -5. The time now is 08:11 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration