monitoring network traffic without knowing the destination or source
Posted on 2006-05-25
I have a situation where there are two networks seperated by cisco routers, running IP IOS. One at a specific time seems to send data to the other network in a one way direction.
Im trying to figure out where the traffic is going to... and where it is coming from... This could be a security problem, it could be a networking problem, it could be user related problem, or it could even be natural and needed... unfortunately records do not indicate when exactly this started.
What are some recommendations for finding the source and destination of traffic, without actually knowing the source or destination. While a packet sniffer would probably do the job unfortunately the network infrastructure on both sides is composed of non intelligent switches connected directly via wire to the routers which only direct traffic to its appropriate destination, it is concievable to break that connection, place a hub and sniff traffic, but that is actually hard due to circumstances beyond my control.
Thanks for any suggestions.