By default, you will see only packets flowing through the port you are
plugged in.
Most switches allows you to monitor all the traffic on a port, but you need
to program that port specifically.
Have a look at your switch documentation to program it properly.
What we have here is a port set up for monitoring on each switch, which is
dedicated to the Ethereal analyser and which replicates the traffic of all
the other ports.
Of course, if you are working at 100 Mbits/s, your PC running Ethereal
should have a 100 Mbits/s card.
If not, you are at risk of loosing some frames.
Reagrds,
Olivier R. Morel
> Message: 8
> Date: Fri, 7 Feb 2003 15:23:26 -0800
> From: Guy Harris <guy@xxxxxxxxxx>
> To: GHASSAN HADDADIN <GHASSAN.HADDADIN@xxxxxxxxxxxx>
> Cc: ethereal-users@xxxxxxxxxxxx
> Subject: Re: [Ethereal-users] I am facing some problems when monitoring
> the traffic on the segment.
>
> On Fri, Feb 07, 2003 at 07:06:47PM +0200, GHASSAN HADDADIN wrote:
> > Does the problem I am facing below related to the fact that all the
> > servers are connected to a switch not a hub ?!
>
> If your machines are plugged into a switch, that's probably the problem;
> see the Ethereal FAQ URL in my reply to your previous message (there's a
> reason why that's the first item in that section of the FAQ...).
>
>
*************************************************************************
Ce message et toutes les pieces jointes (ci-apres le "message") sont
confidentiels et etablis a l'intention exclusive de ses destinataires.
Toute utilisation ou diffusion non autorisee est interdite.
Tout message electronique est susceptible d'alteration.
La SOCIETE GENERALE et ses filiales declinent toute responsabilite au titre de ce message s'il a ete altere, deforme ou falsifie.
********
This message and any attachments (the "message") are confidential and
intended solely for the addressees.
Any unauthorised use or dissemination is prohibited.
E-mails are susceptible to alteration.
Neither SOCIETE GENERALE nor any of its subsidiaries or affiliates shall be liable for the message if altered, changed or falsified.
*************************************************************************