Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

monitor SMTP traffic

I have a catalyst 4506 switch. what software can I use to monitor traffic on a switch? For an example I would like to monitor SMTP traffic. I image Cisco has software that does this.

4 REPLIES
New Member

Re: monitor SMTP traffic

You can use Scrutinizer and you can get free copy from their home page: http://www.plixer.com/

or any other NetFlow software...etc.

Silver

Re: monitor SMTP traffic

what do you mean by monitor?

if you would like just to have a copy of the traffic then you need to do SPAN (switch port analyzer) and use software (like ethereal) to capture and disply the traffic (think to use filters).

if you think about viruses, then you must monitor that before coming to your swtch using smtp gateways.

if you think about attacks, use SPAN and IDS/IPS.

New Member

Re: monitor SMTP traffic

OK, know I have a track to follow. So basically I have to enable SPAN on the catalyst 4506. I was able to look through the documentation and read that I had to use "set span 'source port' 'destination port'..

This brings to light three question.

what is the syntax used to set span for all port going to the one destination port?

How can I tell mod/src_ports ?

I see that the CNA can give me a visual layout of a switch mod/src_ports. What version works with the catalyst 4506?

New Member

Re: monitor SMTP traffic

Hi,

switch (enable) set span 5/1 5/2

everything on 5/1 will copied to 5/2

Use Ethereal, wireshark or Microsoft Network Monitor 3.1 to capture the data.

Connect your pc/laptop to 5/2 and start either above application and start to capture it

- show span to display any configured ports

- set span disable 5/1

You can find additional documentation from;

http://www.cisco.com/warp/public/473/41.html

278
Views
0
Helpful
4
Replies