Wireshark-users: [Wireshark-users] Multiple Monitors/Sniffs of the same source

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Goodenough <GGoodenough@xxxxxxxxxxxxxxxxxx>
Date: Fri, 21 May 2010 11:57:33 -0400
I've read a few threads on the list here talking about portable network taps, how to wire them and so on. However I haven't read anything or found much information on the web about having the source traffic from a SPAN'd/Monitored port to multiple destinations. 

I have a NTOP/Snort installation on one machine and a Websense installation on another. They both need to log/see the same traffic. Is there a device or a way to have several targets monitor a single source?


Thanks,

GG