How do you packet sniff a network that uses a cisco router or switch and want to see all out/inbound traffic?
August 20th, 2008 | by switch |
Jsun asked:
Im just curious how it is possible to see all outbound and inbound traffic on a large network. I’m apart of an IS team, and was just curious what you would do. I know you need to have windows to say, install wireshark, but on a switched network, or a network with a router, how would you see ALL inbound and outbound traffic? Can wireshark be installed on the actual router, or would you have windows pc that connects to the router console, and then sniff from that. How does this work? I mean, I can snigg my local traffic on my hub, but what about all other traffic? I am curious to see who is using bit torrent and such programs, and just get an idea of overall traffic that comes into our network, and leaves our network. I’m obviously a newbie, but my manager says for me to experiment as much as possible. We have a very liberal IS environment, being that we are a non-profit facilitiy. So, any help would be appreciated!. I just always wondered how that it was possible to packet analyze route
BRYON
Im just curious how it is possible to see all outbound and inbound traffic on a large network. I’m apart of an IS team, and was just curious what you would do. I know you need to have windows to say, install wireshark, but on a switched network, or a network with a router, how would you see ALL inbound and outbound traffic? Can wireshark be installed on the actual router, or would you have windows pc that connects to the router console, and then sniff from that. How does this work? I mean, I can snigg my local traffic on my hub, but what about all other traffic? I am curious to see who is using bit torrent and such programs, and just get an idea of overall traffic that comes into our network, and leaves our network. I’m obviously a newbie, but my manager says for me to experiment as much as possible. We have a very liberal IS environment, being that we are a non-profit facilitiy. So, any help would be appreciated!. I just always wondered how that it was possible to packet analyze route
BRYON
2 Responses to “How do you packet sniff a network that uses a cisco router or switch and want to see all out/inbound traffic?”
By steven25t on Aug 21, 2008 | Reply
why don’t you google your question…
thanks
By ohio44903 on Aug 23, 2008 | Reply
You should do more research on it. There is a number of ways to do it. You may need a stand alone system with 2 NIC’s. And then you have to disconnect the router Ethernet and patch it thru this stand alone system so all traffic passes thru it. Some analyzers will pick the traffic up off the Ethernet interface of the router too. Just research them, good to hear that you get to play and experiment with it, one of the best ways to learn for sure.