We help IT Professionals succeed at work.

Switch Port Mirror Limitations on Monitoring PC using Wireshark

4,444 Views
Last Modified: 2012-06-22
My question is quite general. I'm using a Dell PowerConnect 5324.

I would like to monitor the traffic of 1 PC using another PC as a monitor running wireshark. On page 228 of the switch it says

The following restrictions apply to ports configured to be destination ports:
1. IP interfaces are not configured on the port
2. The port is not a VLAN member

Does this mean that I can't use the Monitoring PC as a regular PC that browses the internet or shares files with other PCs?

Thanks!
Comment
Watch Question

Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION

Commented:
Just another note, not all network equipment stops traffic to and from the pc connected to the destination port. It seems to be vendor specific. Some vendors block traffic and some don't.

Author

Commented:
Thanks for the reply. It's nice to get some confirmation.

What if my monitoring PC has 2 NICs? Would that work?

Author

Commented:
Sorry, I wasn't specific.

If I still want to use the Monitoring PC for other network tasks, could I do it if the PC had 2 network interfaces?  I know the network card has 2 ports. I would like to avoid dedicating a PC just for monitoring if I don't have to.

Thanks!
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION

Author

Commented:
Thanks a lot for your quick responses and help.
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.