One difference between the $1K tap and the DIY version might be that
the expensive one will work wherever you put it in your network.
The DIY version instructions to
Strip the cat 5 cable and untwist all the individual wires.
I believe makes it not cat 5 any more. It's probably still good
enough for it's intended purpose - ie. at home & cheap - but maybe not
such a great idea to use on a critical link at work. (which isn't
going to stop me from trying to make one myself :)
Thanks for the link to the DIY taps - I hadn't seen those before.
Regards,
Lee
On 4/12/10, RUOFF, LARS (LARS)** CTR ** <lars.ruoff@xxxxxxxxxxxxxxxxxx> wrote:
> Hi,
> thanks to all who have contributed!
> First of all, i'd like to say that i fully understand the point of the TAP
> advocats.
> But I should have added that most of my sniffing use cases are related to
> network or application layer stuff (mostly VoIP) on low bandwidth links.
> So with this in mind, i go 100% with the comment of Martin and think that a
> port mirroring switch will do the job better for most of my needs.
> (But i'm still looking forward to use a tap sometime)
>
> As for another provocative question to through into the arena, what's the
> difference between this one...
> http://www.networktapstore.com/10-100-1000-TAP.asp
> ($1,095.00! *yuck*)
>
> ...and that one:
> http://hackadaycom.files.wordpress.com/2008/09/tap.jpg?w=450&h=291
> ;-)
>
> or for some more details:
> http://thnetos.wordpress.com/2008/02/22/create-a-passive-network-tap-for-your-home-network/
> http://www.enigmacurry.com/category/diy/
>
> What are the limits of the second type of "solution" in practice?
>
> Another question, purely technical:
> When using a tap, what's the sniffing process:
> Sniff simultaneously on 2 NICs on same PC (2x dumpcap), then merge the files
> with mergecap?
>
> Any other hub/switch recommendations?
>
> PS: I will add the info to the Wiki.
>
> thanks,
> regards,
> Lars
>
>
>> -----Original Message-----
>> From: wireshark-users-bounces@xxxxxxxxxxxxx
>> [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Guy Harris
>> Sent: dimanche 11 avril 2010 22:00
>> To: Community support list for Wireshark
>> Subject: Re: [Wireshark-users] Looking for a portable
>> sniffing-friendlyhub/switch
>>
>>
>> On Apr 11, 2010, at 12:56 PM, Guy Harris wrote:
>>
>> > The right place might be
>> >
>> > http://wiki.wireshark.org/CaptureSetup/Ethernet
>> >
>> > as it already has some information on this.
>>
>> I've added a link to that from the front page, just as
>> there's a link to CaptureSetup/WLAN.
>> ______________________________________________________________
>> _____________
>> Sent via: Wireshark-users mailing list
>> <wireshark-users@xxxxxxxxxxxxx>
>> Archives: http://www.wireshark.org/lists/wireshark-users
>> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>>
>> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>>
> ___________________________________________________________________________
> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
