Sniff with NH1005 hub

Posted on 2003-11-13
Last Modified: 2007-12-19
I'm trying to sniff traffic to and from another PC in the office.  Both my machine, using Windows XP and Ethereal, and the subject machine are plugged in to a Linksys NH1005 hub.  It seems to me the hub is acting more like a switch.  I see broadcast traffic and traffic destined for my machine, but nothing else.  I had similar results with the same hub at home using Linux and tcbdump to try to capture traffic.  Am I missing something?
Question by:rossboulet
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 49

Expert Comment

ID: 9740971
LVL 49

Expert Comment

ID: 9740973
Sorry man wrong thread..

I am  typing way too fast today


Expert Comment

ID: 9741424
I had the exact same problem with a Linksys "hub"...I verified that I was definitely not seeing all the traffic that was crossing the device.  My solution was, unfortunately, to take it back to CompUSA and use an old 3Com 100M hub we had lying around instead.  
The Ultimate Checklist to Optimize Your Website

Websites are getting bigger and complicated by the day. Video, images, custom fonts are all great for showcasing your product/service. But the price to pay in terms of reduced page load times and ultimately, decreased sales, can lead to some difficult decisions about what to cut.

LVL 18

Expert Comment

ID: 9741611
Some manufacturers  choose not to confuse us by calling a cheap switch a 'switch.'They call it a 'hub' use the same basic circuits to it ease  the manufacturing process.

the Linksys Etherfast 10/100 5-port Workgroup Hub (EFAH05W) and
the Netgear 4 port 10/100 Mbps Dual Speed Hub (DS104)
ARE hubs


Author Comment

ID: 9742451
OK chicagoan, I'm confused.  Did you mean to say the NH1005 is a switch?  You used the same model number for both a switch and a hub.
LVL 18

Accepted Solution

chicagoan earned 250 total points
ID: 9743198
yes, sorry, the NH1005 is a switch - paste buffer overrun!

The small 5V netgear, can even run it off the 5v of your keyboard port.

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question