asked on

A router/switch with a port that receives ALL packets

I've heard that they make routers and/or switches that have a special port on them that recieves ALL network traffic. THis would be for using with a packet sniffer. Does anyone know of an inexpensive router/switch with this type of port? What is this type of port called?

Also, anyone recommend an inexpensive software that will monitor all network traffic when connected to this port?

Bottom line: I need a router/switch with a "receive all" port and some software...cheap. (yeah, right)

SOLUTION

Graham N.

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER CERTIFIED SOLUTION

getzjd

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

getzjd

You cannot simply just use wireshark in a switched environment. If you have a hub, then go for it. Otherwise you need a switch that supports port mirroring

getzjd

If you use wireshark in a switched environment with no port mirroring then all you see is your PC traffic and broacasts

Graham N.

"If you use wireshark in a switched environment with no port mirroring then all you see is your PC traffic and broadcasts" - this is not strictly correct as the ability of Wireshark to see network traffic is dependent on the type of NIC in place on the monitoring PC and whether you are in a "managed" or "un-managed" environment.

getzjd

You basically stated what I already stated. Managed or unmanaged is no different that saying a switch that supports port mirroring and one that doesnt. Yes your network card may not support it, but if it does and you are in a switched environment you need a switch that supports port mirroring as well... period. Port mirroring to my knoweldge is ONLY found on managed switches. I would venture to say that not every single managed switched provides port mirroring...

markefaris

ASKER

Thanks graham... for the wireshark link.
and thanks getzjd for recognizing that I was using a switch (which would not broadcast to all ports) and for the link of switches that have port mirroring (and for defining port mirroring).