Ethereal-users: Re: [Ethereal-users] Capture packets in one direction sonly

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Mon, 7 Jan 2002 02:03:57 -0800
On Mon, Jan 07, 2002 at 08:52:39AM +0530, Praveen Pavuluri wrote:
> 	Is there any alternative  so that I could capture all transmissions from
> 'X', including those not towards on which ethereal is running.(Effectively
> an alternative for the  switched-network or 10/100Mb hub problem)?

If your machine, machine "y", and the machines with which it's
communicating, are plugged into a switch, an alternative might be to
configure the switch so that the port into which machine "X" is plugged
has traffic between other ports "mirrored" to it.  Not all switches
support this, as far as I know; I don't know what switches support it,
and I don't know how to configure those switches to do this.

Another alternative would be to replace that switch with a "dumb"
single-speed hub - or a dual-speed hub *IF* all machines in question are
running at the same speed.

If your machine, machine "y", and the machines with which it's
communicating, are plugged into a 10/100Mb hub, the alternative is to
arrange that all of those machines are running at 10Mb or all of them
are running at 100Mb.