cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
648
Views
0
Helpful
4
Replies

monitor SMTP traffic

cedric.spence
Level 1
Level 1

I have a catalyst 4506 switch. what software can I use to monitor traffic on a switch? For an example I would like to monitor SMTP traffic. I image Cisco has software that does this.

4 Replies 4

ddemirchi
Level 1
Level 1

You can use Scrutinizer and you can get free copy from their home page: http://www.plixer.com/

or any other NetFlow software...etc.

ohassairi
Level 5
Level 5

what do you mean by monitor?

if you would like just to have a copy of the traffic then you need to do SPAN (switch port analyzer) and use software (like ethereal) to capture and disply the traffic (think to use filters).

if you think about viruses, then you must monitor that before coming to your swtch using smtp gateways.

if you think about attacks, use SPAN and IDS/IPS.

OK, know I have a track to follow. So basically I have to enable SPAN on the catalyst 4506. I was able to look through the documentation and read that I had to use "set span 'source port' 'destination port'..

This brings to light three question.

what is the syntax used to set span for all port going to the one destination port?

How can I tell mod/src_ports ?

I see that the CNA can give me a visual layout of a switch mod/src_ports. What version works with the catalyst 4506?

Hi,

switch (enable) set span 5/1 5/2

everything on 5/1 will copied to 5/2

Use Ethereal, wireshark or Microsoft Network Monitor 3.1 to capture the data.

Connect your pc/laptop to 5/2 and start either above application and start to capture it

- show span to display any configured ports

- set span disable 5/1

You can find additional documentation from;

http://www.cisco.com/warp/public/473/41.html

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: