To do sniffing using Ethereal

Unanswered Question
Mar 21st, 2007
User Badges:

Hi All,

I would like to do sniffing on a switch where the server connected to check the traffics to the server. How can I achieve using Ethereal and the configuration on the switch?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Jon Marshall Wed, 03/21/2007 - 00:49
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN


You need to span the switch port that the server is on to a second port. Connect your PC into the second port and run ethereal and you will see all traffic destined for server.

Don't know which model of switch you have but if you do a search on Cisco site for make of your switch and span you should get the config docs eg. "3550 span".

Alternatively, if the server is a W2K server could you not use the Network Monitor tool that comes with the Windows Service Pack. Or load ethereal onto your server. Both of these would mean you didn't have any config to do on the switch.




This Discussion