[Sunhelp] About snoop

[John Lee]

Hello,

Thanks for all your help. I know the limitation is due to the switched
network not snoop tool.
I really appreciate all your help.

Regards.
John

-----Original Message-----
From: sunhelp-admin at sunhelp.org [mailto:sunhelp-admin at sunhelp.org]On
Behalf Of Martin Wedel sr
Sent: Friday, October 13, 2000 2:22 PM
To: sunhelp at sunhelp.org
Subject: Re: [Sunhelp] About snoop


The 'problem' doesn't lie within the sniffer. The whole idea behind
switched networks is that traffic is directed only to the segment where
the destination node is located, no more no less, save broadcast, ARP, etc
etc. No sniffer can get past this, as it can't 'sniff' what it can't
see.
  If you are doing this for a legitimate reason, I suggest using a
mirrored port on the switch for your NIDS/analyzer box.

--
Martin Wedel
sun at minor-element.net
http://www.minor-element.net/

On Fri, 13 Oct 2000, John Lee wrote:

> Hello,
>
> As you know, snoop is very useful tool in troubleshooting. But it has
> limitation when used in a switched network. My question is " Are there any
> other sniffer tools to address the snoop's limitation ?"
>
> Any ideas or hints will be much appreciated.
>
> Regards.
> John
>
> _______________________________________________
> SunHELP maillist  -  SunHELP at sunhelp.org
> http://www.sunhelp.org/mailman/listinfo/sunhelp
>

_______________________________________________
SunHELP maillist  -  SunHELP at sunhelp.org
http://www.sunhelp.org/mailman/listinfo/sunhelp