Full Disclosure mailing list archives

Re: How do you sniff your LAN subnet in nowdays switched networks ?


From: Valdis.Kletnieks () vt edu
Date: Sat, 26 Nov 2005 04:40:08 -0500

On Sat, 26 Nov 2005 11:24:42 +0200, Maxim Vexler said:
In the mean time I would like to ask you if any testing can be made to
locate a noisy machine on a subnet that is connected with a switch?

If it's a managed switch, you can just dump the per-port statistics
and look for one that looks way off.

Oh, and while you're at it, consider the possibility that throughput has
fallen through the floor because of a duplex mismatch - if the switch and the
router to the rest of the internet get confused whether they're in full or
half duplex, and one chooses one and the other chooses the other, you'll
have lots of packet loss....

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: