Re: sniffing network traffic, only via a hub or does it matter?


"markm75" <markm75@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CE3EF95E-E28A-42FE-9649-56D30D0CC59B@xxxxxxxxxxxxxxxx


"Dave" wrote:


"markm75" <markm75@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A6ACD23E-5FB5-4BA4-A3F9-FFDB9766A5B3@xxxxxxxxxxxxxxxx
I'm trying to trace down some sluggishness in our network and see what
ports
are in use and activity etc.. using Ethereal and other tools..

Is it true.. that the best way is to plug a laptop into a hub (vs a
switch),
which actually would sit outside the firewall.. in between the router
and
the
cable modem (internet)?

Thanks for any info..

well, it depends.... if the external network connection is slow then this
is
the likely place to start. if the internal network is slow then this
won't
help as you need to watch machine to machine traffic on the lan that
won't
show up outside the router.




But does it matter if its a switch or a hub?

In my case we had one user who was causing our internet connection to slow
down to 300ms in ping times.. i was able to trace the problem to them by
putting the laptop in front of the router.. but by the same token.. i
think
the software captures the same data if behind the router and on a switch
(not
sure if a hub is needed or if so why)?


a switch only sends a machine packets that are meant for it, or broadcast
packets meant for the whole network. so if the sniffer is on a switch port
it won't see the other machine's traffic. a hub sends everything to every
port that is connected. so putting a hub between the modem and router is
the only way to monitor internet traffic for all the machines.

it won't let you monitor internal lan traffic between machines or servers on
your lan since the router will keep them inside and not send them to the
internet connection.


.

Relevant Pages

  • Re: Digital switch over query
    ... > ethernet switch(ing hub). ... a box is a hub or a box is a switch and there is a difference between ... SoHo router to gigabit speed when the benefit would ... after waiting a couple of hours for the first test install to ...
    (uk.tech.digital-tv)
  • Re: Trouble obtaining IP address
    ... So some internet providers will not ... On newer systems, you have to power cycle the cable modem to make it work reliably, with a pause of about a minute between off and on. ... This is what the "clone MAC address" function on routers is for - you log into the router from the system that was originally connected to the cable modem, ... >said I cannot switch Ethernet cable from one computer to another and>expect ...
    (microsoft.public.windowsxp.network_web)
  • Re: Joining Two Large Network
    ... The "router interfaces" of a Layer3 Switch are created with VLans ... will need each side to keep using their Internet Device as their Default Gateway ...
    (microsoft.public.windows.server.networking)
  • Re: [SLE] Question about net connection/sharing
    ... >>> My girlfriend recently got satellite internet. ... >> There is a big difference in a hub, a router, and a switch. ... Maybe I assumed there was a firewall installed? ...
    (SuSE)
  • Re: Ping works, internet does not. Im missing something here..
    ... Ping works, internet does not. ... , switch, switch, rtr_int01, switch, rtr_gateway ... I can ping the other side of this router (intfa0/0) ...
    (comp.dcom.sys.cisco)
Quantcast