Solved: 2801 SPAN port

mladentsvetkov · ‎10-15-2007

Hi,

I have to sniff the traffic from the outside interface of a remote-site router, 2801. The router has only 2 Fa ports, and they are currently occupied: one for connecting to the service provide and the other, connecting to the office LAN.

In the documentation, I've read that SPAN can be configured on 2800 only if ethernet switch module is installed.

How could I sniff the traffic on the fa0/1 (to service provider) interface with Ethereal? Is it possible at all?

Regards,

Mladen

Collin Clark · ‎10-15-2007

You would have to place a HUB between fa0/1 and the connection to the ISP.

HTH and please rate.

View solution in original post

Collin Clark · ‎10-15-2007

You would have to place a HUB between fa0/1 and the connection to the ISP.

HTH and please rate.

mladentsvetkov · ‎10-15-2007

It is quite diffucult to find a hub theese days...

I considered this option, but as a last resort solution :).

Thanks,

Mladen

Collin Clark · ‎10-15-2007

You could try a debug and dump it out to SYSLOG but thats pretty dangerous. Hubs are readily available, but usually only with 10MB. You could also look at using a network TAP.

http://www.netoptics.com/products/product_family_details.asp?cid=1&pid=159&Section=products&menuitem=&tag=NetOptics+Network+Taps

HTH and please rate.