Solved

Packet Monitoring Switched Network

Posted on 2009-05-05
7
255 Views
Last Modified: 2012-05-06
Hello everyone, how can I monitor the network traffic (packets) on a switched network? I'm using a Cisco SLM248G 48-Port 10/100 + 2-Port Gigabit Smart Switch: SFPs.

Please advise.
0
Comment
Question by:thursdasy
  • 4
  • 3
7 Comments
 
LVL 2

Expert Comment

by:alvin602
ID: 24308466
You'd have to set a SPAN (Switch Port ANalyzer) port.  Basically set one port to monitor traffic from other ports.  here is an example:

http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml
0
 
LVL 2

Author Comment

by:thursdasy
ID: 24308812
i don't think the switch I'm using is a catalyst. This is a Cisco sLM248G business smart switch.
0
 
LVL 2

Expert Comment

by:alvin602
ID: 24309730
Right, that is the old Linksys web interface. Once in the web interface you should be able to go to Admin tab, and select Port Mirroring. The options from there are pretty self explanitory.


Set the following attributes for port mirroring using the
Port Mirroring screen.

Target Port The port that will mirror the traffic on the
source port.
Source Port The port whose traffic will be monitored.
Type Allows you to select which traffic to mirror to the
target port; receive, transmit, or both.
RxOnly Mirror only received traffic. This is the default
value.
TxOnly Mirror only transmitted traffic.
Both Mirror both received and transmitted traffic.
Specify the source port, the traffic type to be mirrored, and
the target port, then click Add to List. The mirror session
is displayed in the text box.
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 2

Author Comment

by:thursdasy
ID: 24317280
For some reason it isn't getting an IP from the router I'm not sure what's wrong. I don't see it on the network... Any ideas on what could be wrong? Not sure what to do since I cannot see it on the network and there is no other means to connect to the device other than IP?
0
 
LVL 2

Expert Comment

by:alvin602
ID: 24319838
If the switch was never previously configured, it will have a default IP address of 192.168.1.254.  You will need to connect a computer to it on the same subnet, and then connect to it via a web browser by pointing to it at http://192.168.1.254.  Then you can change any settings, or IP address, or DHCP setting to get address from DHCP server.

If it was previously configured, and you do not know what the config is, you can reset the device to factory defaults by holding the reset button for more than 10 seconds.  If this device is online and in use, it will disrupt anything connected to it if reset.
0
 
LVL 2

Author Comment

by:thursdasy
ID: 24321203
It should be at its factory default settings. I went and checked my DHCP records and it isn't requesting / has an IP address. I also checked 192.168.1.254 there was nothing. Well I checked 192.168.10.254 since our DHCP ip range is .10 not .1
0
 
LVL 2

Accepted Solution

by:
alvin602 earned 500 total points
ID: 24336776
If it is still at factory settings the switch IP will be 192.168.1.254 NOT 192.168.10.254, regardkless of what your network is set to.  You need to manually configure a workstation to 192.168.1.x, and connect it directly to the switch so it can talk to it.  It won't talk to anything else, but at least you will be able to configure the switch.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now