Switch to help Monitor Traffic



I'm looking for a 10/100 Switch that will help me monitor IP Packets/Traffic
on our network.

With all of our (dumb) Switches on our network I cannot to Packet traces of
all of the Packets on a given network segment as the Switch will only send
packets destined for the MAC address of the Monitoring PC to its Switched
port.

Seems like Cisco and others make a Switch with an RMON port or something
that will allow you to Mirror all the other ports on the Switch. Can someone
recommend a inexpensive option?

Do they make a small 100 Base-T HUB? I could take the feed to the Main
switch and route it to the 100base-T hub and plug in the Monitoring PC. I do
this now with a 10meg hub and it works, just causes bandwidth issues.

Thanks,
Scott<-


.



Relevant Pages

  • Re: Home Network Setup Problem
    ... >> challenge of my own home network. ... Probably it is just a plain old switch ... Otherwise it will not hand packets from one network ... There is no firewall to complicate the setup. ...
    (freebsd-questions)
  • Re: Reduce effects of DDoS attack ...
    ... The packets your 200.046.204 machines are receiving are most likely ARP ... portion of that catalyst switch, and the offending network to another ... > Now, I can login to the servers, and load is negligible ... ...
    (freebsd-isp)
  • Re: Network Jam
    ... what these packets really are. ... There was an issue happened a couple times in our network that caused all the ... network card was still sending out packets (bad packets, ... network cable was unplugged from the switch, ...
    (microsoft.public.windows.server.networking)
  • RE: ARP Spoof Question
    ... Hardware MAC addresses are supposed to be globally unique. ... If you have duplicate MAC addresses on a shared-media network, ... > spoofed ARP packets to receive packets but have been unable to locate ... > my switch table. ...
    (Security-Basics)
  • Re: Catalyst 4000 - Ciscos Response
    ... on a variety of factors such as Switch load and traffic patterns. ... Flooding packets ... database on the switch containing switch ports and the MAC addresses sourced ... Sniffer is on a different port than the workstation and servers. ...
    (Bugtraq)

Loading