To do sniffing using Ethereal

Unanswered Question
Mar 21st, 2007

Hi All,

I would like to do sniffing on a switch where the server connected to check the traffics to the server. How can I achieve using Ethereal and the configuration on the switch?

Thanks!

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jon Marshall Wed, 03/21/2007 - 00:49

Hi

You need to span the switch port that the server is on to a second port. Connect your PC into the second port and run ethereal and you will see all traffic destined for server.

Don't know which model of switch you have but if you do a search on Cisco site for make of your switch and span you should get the config docs eg. "3550 span".

Alternatively, if the server is a W2K server could you not use the Network Monitor tool that comes with the Windows Service Pack. Or load ethereal onto your server. Both of these would mean you didn't have any config to do on the switch.

HTH

Jon

Actions

This Discussion