HP Procurve 4000M - Port Sniffing

Posted on 2004-11-11
Last Modified: 2012-08-13

I want to monitor my network activity, mostly chats and http browsing, as well as dns requests.

I did put a syslog on my firewall so now I can monitor my dns requests (I have a netscreen 10 firewall .. . .. i know it sucks but i am new here so I have to do with it)

Now I want to do port sniffing but my HP Procurve 4000M switches does not allow me to.

As I said I am new here so I do no thave the passwords to access the switches and no one has them since no one touched them since installation, which was way back.

How do I enable port sniffing on my network without jeopardizing my stability and integrity.

Thanks !
Question by:matanguay
    LVL 6

    Assisted Solution

    If you lost the managers password you have to physically press the Clear button for at least
    one second. This will clear the users and managers password.
    LVL 8

    Accepted Solution

    are you talking about wanting to packet sniff and see the traffic?  if so... clear the password as panjandrum stated and get into the switch using the web interface... click on configuration->Monitor Port... select monitor selected ports.... for monitoring port... select the port you can plug a dedicated workstation into for packet sniffing purposes... select the ports you want to monitor... this will mirror all traffic from the monitored ports to the monitoring port...

    Author Comment

    Will I lose data or will it shutdown the network for a few seconds to clear the passwords ?

    Also, I have two of them, so do I need to do a clear on both ?

    How do I connect through web interface .. .. I do not have the Switch's IP.

    THANKS !
    LVL 8

    Expert Comment

    You would need to clear the passwords on both of the Procurves... to access the web interface you would need to use a console cable to connect to the switch through a serial port on a laptop using a terminal program... from there you can find the ip settings on the switch and change them if necessary.. here's the link to the manual for it...

    oh.. and you wouldn't lose any connectivity while clearing the password...

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    What is IRC? IRC (Internet Relay Chat) is a form of communication between multiple users. It is available freely to anyone with inernet access. IRC is a great way to communicate with others e.g. There is an IRC channel for Ubuntu Linux, which is fo…
    Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now