Solved

sniffer pro 2.5

Posted on 2002-07-19
3
324 Views
Last Modified: 2012-05-04
Can I use sniffer pro 2.5 to capture the traffic such as from my network to internet ?

for example ,if my corporate ip addresses is in the 202.183.1.0/24 net , then I want to capture anyone from 202.183.1.0/24 suppose to google ,this is because I want to know where the employee is going.

I saw that I can only capture the traffic from only my network, such as from 202.183.1.0/24 net to only 202.183.1.0/24 net.Have any method I can set up ?
0
Comment
Question by:sirator
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 50 total points
ID: 7166612
Of course you can use the sniffer to capture all traffic. You can also setup filters to only capture one source address to any and any to that one address. I would assume that since you have a full class C subnet that you are a large enough company to have a firewall. Do you use NAT on the firewall? You need to plug the sniffer into the same hub/switch as the inside of the firewall. If it is a switch, you need to create a mirror or monitor port for the sniffer, or put the firewall and the sniffer on a hub and plug the hub into the switch.
0
 
LVL 3

Expert Comment

by:mbruner
ID: 7197425
As usual, lrmoore is right.  

One additional note though.  Be careful when using hubs.  Not all of them flood ALL data to all ports.  Many of them now learn MAC addresses and send unicast data only to the appropriate ports (much like a switch).  I ran across this problem a while back.  I was using a 3Com hub and found I was only recieving broadcast traffic when sniffing.  I spent a long time searching for a cheap, "dumb" hub to use to get the results I needed.  

Anyway, hope it helps.  Good luck!!
0
 

Author Comment

by:sirator
ID: 7256027
Thanks so much
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Liquid Web and Plesk discuss how to simplify server management with a single tool  in their webinar.
Recovering from what the press called "the largest-ever cyber-attack", IT departments worldwide are discussing ways to defend against this in the future. In this process, many people are looking for immediate actions while, instead, they need to tho…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…
Suggested Courses

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question