RE: Port mirroring across multiple switches

["Hasnain Atique" <hatique () hasnains com>]

The switches in question aren't Cisco. So RSPAN isn't quite the
solution.


> -----Original Message-----
> From: Peter Schawacker [mailto:peter () schawacker com] 
> Sent: Friday, December 05, 2003 6:56 AM
> To: Hasnain Atique
> Cc: security-basics () securityfocus com
> Subject: Re: Port mirroring across multiple switches
>
>
> RSPAN will do what you need if your switches support it.  See 
> http://www.cisco.com/en/US/products/hw/switches/ps708/products
> _configuration_guide_chapter09186a0080121d34.html.
>
> Peter
>
>
> ----- Original Message ----- 
> From: "Hasnain Atique" <hatique () hasnains com>
> To: <security-basics () securityfocus com>
> Sent: Thursday, December 04, 2003 2:23 AM
> Subject: Port mirroring across multiple switches
>
>
> > What's the best approach to port mirror traffic from multiple 
> > switches? Should I enable mirroring on one port of each switch, and 
> > then connect those ports to a hub and put my sniffer on the 
> same hub?
> > My ultimate objective is to collect ARP query information from all 
> > switches.
> >
> > Thanks.
> >
> > -- H
> ----------------------------------------------------------------------
> > ----
> -
> >
> ----------------------------------------------------------------------
> > ----
> --
> >


---------------------------------------------------------------------------
----------------------------------------------------------------------------