> Wireshark appears to be an open-source sniffer but it also requires a
> network hub.
Wireshark is awesome, and I'm honestly shocked at how the OP could
"research" open source packet sniffers and miss it, because has a massive
reputation. As for needing a hub, any packet sniffer will either need a hub,
a switch that echoes traffic to the port it's plugged into, distributed
agents or some other similar trick, they can only 'sniff' what they see
going past them, after all.
smlunatick - 28 Apr 2008 01:56 GMT
On Apr 26, 2:41 pm, "Robert Moir" <usenet+robspamt...@gmail.com>
wrote:
> > Wireshark appears to be an open-source sniffer but it also requires a
> > network hub.
[quoted text clipped - 5 lines]
> agents or some other similar trick, they can only 'sniff' what they see
> going past them, after all.
Try finding a new "hub." There are getting to be "rare."
Robert Moir - 28 Apr 2008 18:48 GMT
> On Apr 26, 2:41 pm, "Robert Moir" <usenet+robspamt...@gmail.com>
> wrote:
[quoted text clipped - 9 lines]
>
> Try finding a new "hub." There are getting to be "rare."
Yeah. Luckily most reasonable new switches come specced to allow you to echo
traffic if you want.
smlunatick - 28 Apr 2008 21:59 GMT
On Apr 28, 1:48 pm, "Robert Moir" <usenet+robspamt...@gmail.com>
wrote:
> > On Apr 26, 2:41 pm, "Robert Moir" <usenet+robspamt...@gmail.com>
> > wrote:
[quoted text clipped - 12 lines]
> Yeah. Luckily most reasonable new switches come specced to allow you to echo
> traffic if you want.
Give me an example of this type of switch.
Robert Moir - 01 May 2008 23:52 GMT
> Give me an example of this type of switch.
Just about any "intelligent"/programmable switch that you'd actually want to
install into a business big enough to own a server that's been purchased in
the past 3 or 4 years. It isn't a rare thing.
Robert Moir - 01 May 2008 23:54 GMT
> Give me an example of this type of switch.
http://en.wikipedia.org/wiki/SMON
http://en.wikipedia.org/wiki/Port_mirroring