Solved

sniffer pro 2.5

Posted on 2002-07-19
3
318 Views
Last Modified: 2012-05-04
Can I use sniffer pro 2.5 to capture the traffic such as from my network to internet ?

for example ,if my corporate ip addresses is in the 202.183.1.0/24 net , then I want to capture anyone from 202.183.1.0/24 suppose to google ,this is because I want to know where the employee is going.

I saw that I can only capture the traffic from only my network, such as from 202.183.1.0/24 net to only 202.183.1.0/24 net.Have any method I can set up ?
0
Comment
Question by:sirator
3 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 50 total points
ID: 7166612
Of course you can use the sniffer to capture all traffic. You can also setup filters to only capture one source address to any and any to that one address. I would assume that since you have a full class C subnet that you are a large enough company to have a firewall. Do you use NAT on the firewall? You need to plug the sniffer into the same hub/switch as the inside of the firewall. If it is a switch, you need to create a mirror or monitor port for the sniffer, or put the firewall and the sniffer on a hub and plug the hub into the switch.
0
 
LVL 3

Expert Comment

by:mbruner
ID: 7197425
As usual, lrmoore is right.  

One additional note though.  Be careful when using hubs.  Not all of them flood ALL data to all ports.  Many of them now learn MAC addresses and send unicast data only to the appropriate ports (much like a switch).  I ran across this problem a while back.  I was using a 3Com hub and found I was only recieving broadcast traffic when sniffing.  I spent a long time searching for a cheap, "dumb" hub to use to get the results I needed.  

Anyway, hope it helps.  Good luck!!
0
 

Author Comment

by:sirator
ID: 7256027
Thanks so much
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Ransomware continues to be a growing problem for both personal and business users alike and Antivirus companies are still struggling to find a reliable way to protect you from this dangerous threat.
Many companies are looking to get out of the datacenter business and to services like Microsoft Azure to provide Infrastructure as a Service (IaaS) solutions for legacy client server workloads, rather than continuing to make capital investments in h…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now