JT,
The
easiest thing to do is use your span ports on the switch. If you need to you can hang a 100 only
hub off of the span port, that way you can have ids, sniffer, etc.
Another option is a probe,
but with a probe you will need to have 2 Ethernet ports on your ethereal
sniffer, and can only see one direction on each instance of ethereal.
I went through the same
thing, until I discovered my switches now support 4 spans (6509’s), and I did
some intelligent placement of sniffers and vlan layout.
-----Original
Message-----
From: J T
[mailto:JT@xxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Thursday, June 26, 2003 9:58
AM
To: 'ethereal-users@xxxxxxxxxxxx'
Subject: Re: [Ethereal-users]
Looking for a new non-switched hub
One
mode bit of info - I originally tried using an old 3Com 10Mb/s hub, but my
Firewall's NIC wasn't able to link (I tried forcing it to 10Mb/s, no duplex but
no luck).
I
did just have a thought though - I'm going to try connecting the Firewall to
the 10/100 hub, the router & Ethereal PC to the 10Mb/s hub, and then
daisy-chain the two hubs together. This way the Firewall gets the 100 Mb/s
connection it needs, and the router & Ethereal PC should see all the
traffic coming in from the other hub.
I'll
let everyone know how it goes.
Jeffrey Threlfall
Sr. Network Administrator
Healthcare Automation
VOX - 401.691.3240
Email - JT@xxxxxxxxxxxxxxxxxxxxxxxxx