which linux sniffer can I use on the switched network ?
 

hi

which linux sniffer instead of ethereal or tcpdump can I use on the switched network with port mirroring ?

greetings
cccc

I don't know about port mirroring, but Etthercap supports switched LAN.

Well if you're sniffing on the "mirror" or "span" port, then you can use any sniffer placed in promiscuous mode. If you're not plugged into the span port, than it's irrelevant that spanning even exists and you just treat it like a regular switch. For that you would need Ettercap.