RE: Port mirroring across multiple switches

["Tim" <sftim () timmah tcmkt net>]

 I wouldn't do that.  You'll run into layer 2 loop issues I'm thinking.
You'll see some especially nasty stuff if you have spanning tree on.

-Tim

-----Original Message-----
From: Hasnain Atique [mailto:hatique () hasnains com] 
Sent: Thursday, December 04, 2003 4:23 AM
To: security-basics () securityfocus com
Subject: Port mirroring across multiple switches


What's the best approach to port mirror traffic from multiple switches?
Should I enable mirroring on one port of each switch, and then connect
those ports to a hub and put my sniffer on the same hub? 

My ultimate objective is to collect ARP query information from all
switches. 

Thanks.

-- H


---------------------------------------------------------------------------
----------------------------------------------------------------------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------