The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
1answer
20 views

How are mirrored packets encapsulated and sent to the receiver?

I'm wanting to stress test an application I've written that takes in mirrored network traffic using Bro and processes it. I'd like to generate the traffic and present it to Bro in a way that's as ...
5
votes
1answer
12k views

HP Procurve 5406ZL - How to enable port-mirroring?

How would you enable port mirroring for a HP Procurve 5406ZL? The configuration guide is not very clear in the mirror-port function. I know that I'll need to use the mirror-port [[ethernet] ...
0
votes
0answers
22 views

How to replay online traffic from one interface to another with delay

I 'm searching a way to replay traffic from one interface to a secondary interface. I want to all the traffic (not specific to a tcp port) incoming to one interface will be replayed from another ...
-1
votes
1answer
97 views

rewrite destination IP of TEEed traffic

Server 1 and Server 2 (Centos 7) both host the same application, which listens on UDP port 1514. Server 1 receives traffic on this port. The goal is for the application on Server 2 to receive a copy ...
2
votes
1answer
171 views

SPAN/Mirrored port usage

I have a HP ProCurve switch with 24 ports. If I set up port 24 to mirror port 1 (which goes to my router), can I use port 24 for normal LAN access as well as to run something like ntop or bandwidthd? ...
0
votes
1answer
101 views

make specified ip log filtering from port mirroring input with iptables [closed]

I have difficult to create an iptables rule of traffic coming from a switch that is configured as port mirroring. I checked if the traffic from my switch is sent with tcpdump -> Tcpdump detects ...
2
votes
1answer
2k views

vSphere Promiscuous mode only receiving packets one way from network switch

We have two network switches, a POE switch (SwitchA) to power our phones / users computers and a non-POE switch (SwitchB for the rest network.) Each switch is setup to do port mirroring to support ...
1
vote
1answer
112 views

Port mirroring not working through Vsphere

I have mirrored a port from Netgear switch to my VM on vsphere. I cannot see requests when using tcpdump to monitor the traffic, I only see replys. Netgear port mirror works as i have connected a ...
0
votes
2answers
130 views

XP box with 3 NICs on Server 2003 Domain

I have assigned all three NICs IP addresses that are outside the DHCP pool. I have 2 NICs are connected to 1 switch and the 3rd to my second switch. I want to assign one of the two NICs on the 1st ...
0
votes
0answers
155 views

ZyXel ES-2024 - Mirrored port showing duplicated traffic

I have a ZyXel ES-2024 PWD switch. I would like a computer plugged into port 26 to see all traffic that passes through port 2, both inbound and outbound. I have configured port mirroring for the ...
1
vote
1answer
4k views

How to enable Cisco switch port mirroring without rebooting?

I have a Cisco WS-C2960S-24TS-S switch and would like enable a port mirror for network analyzer (such as Snort). I could not see any options in the GUI interface. Is it possible, and how do I enable ...
2
votes
3answers
120 views

Optical mirroring

I have a 10G XPF+ optical cable with market updates from a stock exchange. This cable goes into a switch, which then mirrors every packet to a couple of computers over two ports. The problem with ...
1
vote
1answer
98 views

Port mirroring, 1 source, two destination disadvantages [closed]

What are the disadvantages of having two port mirroring sessions? I have a Cisco 2960 switch in which there is one session having Gi0/1 as source and Fa0/48 as destination. Is it possible to ...
2
votes
1answer
5k views

Network Tap (SPAN port) on FortiGate 100D (FortiOS 4.0MR3)

I'm dealing with a FortiGate 100D for the first time, and am scratching my head as there doesn't seem to be an easy way to mirror ports in the switch; which is really a facility that I presumed it ...
0
votes
3answers
1k views

Monitor traffic between two network switches using a transparent firewall

For debugging reasons i need to see what network traffic especially TCP is transmitted or not. I thought about using an Endian firewall for this, but it doesn't support 2 network interfaces with the ...
1
vote
0answers
381 views

SFP port mirror on 5548 - not working

For the sake of monitoring my internet connection I have set up a port mirror on my Dell powerconnect 5548 from the SFP port to a 1Gb port on the switch, connected to my monitoring interface. The SFP ...
1
vote
1answer
3k views

Is it possible to mirror port to capture packets between VM host and VM?

I have 2 physical machines, A and B. A runs VMWare Workstation with a virtual machine C. C is using Bridged network interface. A and B are both connected via ethernet to a switch. B has two NIC's. ...
3
votes
1answer
189 views

Port Mirror and 802.1Q

Does a port mirror send ethernet frames out of the switch-port with the 802.1Q header bytes still on the frame?