Re: Port mirroring across multiple switches

["Peter Schawacker" <peter () schawacker com>]

RSPAN will do what you need if your switches support it.  See
http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_guide_chapter09186a0080121d34.html.

Peter


----- Original Message ----- 
From: "Hasnain Atique" <hatique () hasnains com>
To: <security-basics () securityfocus com>
Sent: Thursday, December 04, 2003 2:23 AM
Subject: Port mirroring across multiple switches


> What's the best approach to port mirror traffic from multiple switches?
> Should I enable mirroring on one port of each switch, and then connect
> those ports to a hub and put my sniffer on the same hub?
>
> My ultimate objective is to collect ARP query information from all
> switches.
>
> Thanks.
>
> -- H
>
>
> --------------------------------------------------------------------------
-
> --------------------------------------------------------------------------
--
>


---------------------------------------------------------------------------
----------------------------------------------------------------------------