[wplug] Tapping into an Ethernet connection

Eric Cooper ecc at cmu.edu
Fri May 15 11:16:24 EDT 2009


On Fri, May 15, 2009 at 10:04:16AM -0400, Weber, Lawrence A wrote:
> I am concerned that they are also just switches.  Is there any way
> to know if a hub is a hub and not a switch?  Or, is there another
> way to use WireShark to view traffic?

As others have said, almost every recent box is a switch.  But many of
them allow one port to be set up as a mirror or monitor port.

Also, if your devices have enough horsepower, you can run wireshark on
either end, not just in the middle.

-- 
Eric Cooper             e c c @ c m u . e d u


More information about the wplug mailing list