[Sunhelp] About snoop

[Martin Wedel sr]

The 'problem' doesn't lie within the sniffer. The whole idea behind
switched networks is that traffic is directed only to the segment where
the destination node is located, no more no less, save broadcast, ARP, etc
etc. No sniffer can get past this, as it can't 'sniff' what it can't
see.
  If you are doing this for a legitimate reason, I suggest using a
mirrored port on the switch for your NIDS/analyzer box.

--
Martin Wedel
sun at minor-element.net
http://www.minor-element.net/

On Fri, 13 Oct 2000, John Lee wrote:

> Hello,
> 
> As you know, snoop is very useful tool in troubleshooting. But it has
> limitation when used in a switched network. My question is " Are there any
> other sniffer tools to address the snoop's limitation ?"
> 
> Any ideas or hints will be much appreciated.
> 
> Regards.
> John
> 
> _______________________________________________
> SunHELP maillist  -  SunHELP at sunhelp.org
> http://www.sunhelp.org/mailman/listinfo/sunhelp
>