LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 07-07-2008, 05:41 PM   #1
Gen_Hawk
LQ Newbie
 
Registered: Jul 2008
Posts: 3

Rep: Reputation: 0
Question Using Debian as a passthru router w/sniffer


This might be a little odd.

I'm trying to set up my Debian sniffer to sniff all the traffic leaving the network to the Internet. The setup is the DSL router, the switch and VoIP, and another switch. The router plugs into one switch, and everything else plugs into another switch which plugs into the switch the DSL router is plugged into. There is a problem, I have VoIP and if I replace the switch the DSL router is plugged into with a hub and I try to ping a computer on my LAN it will ring busy. Since that didn't work, I though that setting up the sniffer box to do some routing and remove the switch that the DSL router is connected directly to the Debian machine.

Here is how I currently have it set up (the IP addresses are just for reference):

eth0(goes to router): 172.69.1.180
eth1(goes to LAN): 172.69.1.100
DSL Router(LAN IP address):172.69.1.1

At times I'm able to get my PC to talk to both interfaces, and then if I switch the cables around, nothing will talk. And sometimes if I have it set up backwards it talks, then put it the way it should be it doesn't talk. But no matter what, the PC will never talk to the DSL router. The Debian machine like before will talk to the DSL router, but then it won't talk to the LAN, or it will talk to the LAN, but not the DSL router.

Once I get the Debian machine to talk to the LAN and the DSL router, what options are there if my computers don't talk to my gateway(DSL router)?

Or if I don't manage to get the computer to talk to the DSL router, what options are there to get that to work?

Thanks!

Last edited by Gen_Hawk; 07-07-2008 at 05:48 PM.
 
Old 07-07-2008, 05:49 PM   #2
MS3FGX
LQ Guru
 
Registered: Jan 2004
Location: NJ, USA
Distribution: Slackware, Debian
Posts: 5,852

Rep: Reputation: 361Reputation: 361Reputation: 361Reputation: 361
Not exactly what you were asking, but the best way to go about this would be to construct a passive Ethernet tap.

Basically, this is a box that allows data to pass through it transparently, data goes through it as if it was a regular patch cable. The trick is, the box also has tap ports which are tied in to the RX pair in the cable. This means that devices connected to the tap ports can listen to anything happening over the network it is connected to, without the risk of contamination.

Putting one of these devices between your DSL modem and first switch would allow you to sniff all traffic going to the Internet without any of the devices on the network being able to tell.
 
Old 07-07-2008, 05:59 PM   #3
Gen_Hawk
LQ Newbie
 
Registered: Jul 2008
Posts: 3

Original Poster
Rep: Reputation: 0
That's really nifty! I don't have a Ethernet housing though.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Wireless router with sniffer using Linux Sunshine_54 Linux - Wireless Networking 1 10-17-2006 07:06 PM
Dlink DVC-1000 passthru Linux? valnar Linux - Networking 2 10-03-2005 10:30 AM
debian router gontarski Linux - Networking 1 03-20-2005 06:09 AM
Debian router machine element Linux - Networking 0 08-15-2003 01:24 PM
PHP EXEC() and PASSTHRU() Security crazyace Linux - Security 2 12-29-2002 07:15 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 01:32 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration