<div>
<div class="content wysiwyg-content">
Hi Guys!<br />
Hope you can help.<br />
<br />
Id like to set up snort on our switched network at work but I believe Im only getting packets coming to/from my machine when I set it up on my pc plus broadcast and multicast packets.<br />
<br />
Ive read that if you have switches that support port mirroring (or as Cisco calls it, SPAN), that this is possible.<br />
<br />
If I plugged my pc into a port that was set up for port mirroring (SPAN), <br />
<br />
1) do all of our switches have to support port mirroring?<br />
2) where would be the best place (we have heaps of switches) to configure this port mirroring and how would i add all ports from all switches to replicate traffic to this port so I could then sniff the wire?<br />
3) how would you set up sniffing with snort to trap all packets from different subnets?<br />
<br />
I know this is a lot...any help appreciated.<br />
<br />
Thank you.<br />
<br />
Simon
</div>
</div>


Hi Guys!
Hope you can help.

Id like to set up snort on our switched network at work but I believe Im only getting packets coming to/from my machine when I set it up on my pc plus broadcast and multicast packets.

Ive read that if you have switches that support port mirroring (or as Cisco calls it, SPAN), that this is possible.

If I plugged my pc into a port that was set up for port mirroring (SPAN), 

1) do all of our switches have to support port mirroring?
2) where would be the best place (we have heaps of switches) to configure this port mirroring and how would i add all ports from all switches to replicate traffic to this port so I could then sniff the wire?
3) how would you set up sniffing with snort to trap all packets from different subnets?

I know this is a lot...any help appreciated.

Thank you.

Simon

Using Ethereal or Snort on a Switched Network

The Windows operating systems have distinct methodologies for designing and implementing networks, and have specific systems to accomplish various networking processes, such as Exchange for email, Sharepoint for shared files and programs, and IIS for delivery of web pages. Microsoft also produces server technologies for networked database use, security and virtualization.