LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (http://www.linuxquestions.org/questions/linux-networking-3/)
-   -   which linux sniffer can I use on the switched network ? (http://www.linuxquestions.org/questions/linux-networking-3/which-linux-sniffer-can-i-use-on-the-switched-network-209061/)

cccc 07-24-2004 07:37 AM

which linux sniffer can I use on the switched network ?
 
hi

which linux sniffer instead of ethereal or tcpdump can I use on the switched network with port mirroring ?

greetings
cccc

MS3FGX 07-24-2004 08:33 AM

I don't know about port mirroring, but Etthercap supports switched LAN.

chort 07-24-2004 07:30 PM

Well if you're sniffing on the "mirror" or "span" port, then you can use any sniffer placed in promiscuous mode. If you're not plugged into the span port, than it's irrelevant that spanning even exists and you just treat it like a regular switch. For that you would need Ettercap.


All times are GMT -5. The time now is 06:52 AM.