tcpdump installation on unix firewall?

[Andreas.Bolatzki () ch danzas com]

Hi fw-wizards

Do you consider it an utterly bad idea to install a packet sniffer on a firewall. (HP box running FW-1).
Why would I want to do this?
Perhaps you know this already: If sth. is not working it's either the firewall or the network.
I need a tool to proove what's going on... Badly performing server, find out what normal traffic is for an application 
(data volume, traffic profile for one request....) and more of this kind. 

Is there anybody out there... doing this?

Does it interfere with the FW-1 software?

Thanks,

Andy:-oe.


---
Andreas Bolatzki                                                   
DANZAS Management AG
Corporate IT Operations and Support                    
Muenchensteinerstr. 43
CH-4002 Basel, Switzerland
Tel. +41 (61) 319 8686,  Fax. +41 (61) 319 8866                 
 Internet: andreas.bolatzki () ch danzas com
 X400: C=ch;A=atlas;P=danzas;O=dzchbslho;S=Bolatzki;G=Andreas