Ethereal-users: Re: [Ethereal-users] mirrored/monitored/SPAN'd port not working

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Brandon Applegate <brandon@xxxxxxxx>
Date: Wed, 10 Sep 2003 20:04:43 -0400 (EDT)
Make sure your interface is in promiscuous mode.  If you are running *nix, 
it's usually something like:

ifconfig <interface> +promisc # linux example

Sounds like you may be getting all frames but your NIC isn't passing them 
up unless they are [b|m]cast or for itself.

On Wed, 10 Sep 2003, Mike Kelley wrote:

>  
>  
> I've spent over 8 hours researching and trying and RTFM'ing ... I had my
> network admin mirror a port on our cisco switch. When I sniff the port all I
> get is the broadcast messages or local traffic
>  
> I have read 
> http://www.ethereal.com/faq.html#q5.1
> <http://www.ethereal.com/faq.html#q5.1> 
>  over and over ... I have manually (ifconfig ...) put the interfaces into
> promiscuous mode. 
>  
> What next to trouble shoot?
>  
> Thanks in advance
>  
> Mike
> 

-- 
Brandon Applegate - CCIE 10273
PGP Key fingerprint:
7407 DC86 AA7B A57F 62D1 A715 3C63 66A1 181E 6996
"SH1-0151.  This is the serial number, of our orbital gun."