[Sunhelp] About snoop

[Dale Ghent]

On Fri, 13 Oct 2000, John Lee wrote:

| Hello,
| 
| As you know, snoop is very useful tool in troubleshooting. But it has
| limitation when used in a switched network. My question is " Are there any
| other sniffer tools to address the snoop's limitation ?"

Not being able to see all traffic on a switched network is hardly a
limitation of snoop. Snoop puts your machine's interface into 
promiscuous mode, and thus it'll see every packet, but only every packet
that the switch sends down the wire to your machine. Thus there is no way
for snoop itself to see the traffic on all the other switch ports, unless
you configure your switch to send all traffic to your machine.

/dale