Solved

Packet Monitoring Switched Network

Posted on 2009-05-05
7
259 Views
Last Modified: 2012-05-06
Hello everyone, how can I monitor the network traffic (packets) on a switched network? I'm using a Cisco SLM248G 48-Port 10/100 + 2-Port Gigabit Smart Switch: SFPs.

Please advise.
0
Comment
Question by:thursdasy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 2

Expert Comment

by:alvin602
ID: 24308466
You'd have to set a SPAN (Switch Port ANalyzer) port.  Basically set one port to monitor traffic from other ports.  here is an example:

http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml
0
 
LVL 2

Author Comment

by:thursdasy
ID: 24308812
i don't think the switch I'm using is a catalyst. This is a Cisco sLM248G business smart switch.
0
 
LVL 2

Expert Comment

by:alvin602
ID: 24309730
Right, that is the old Linksys web interface. Once in the web interface you should be able to go to Admin tab, and select Port Mirroring. The options from there are pretty self explanitory.


Set the following attributes for port mirroring using the
Port Mirroring screen.

Target Port The port that will mirror the traffic on the
source port.
Source Port The port whose traffic will be monitored.
Type Allows you to select which traffic to mirror to the
target port; receive, transmit, or both.
RxOnly Mirror only received traffic. This is the default
value.
TxOnly Mirror only transmitted traffic.
Both Mirror both received and transmitted traffic.
Specify the source port, the traffic type to be mirrored, and
the target port, then click Add to List. The mirror session
is displayed in the text box.
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 
LVL 2

Author Comment

by:thursdasy
ID: 24317280
For some reason it isn't getting an IP from the router I'm not sure what's wrong. I don't see it on the network... Any ideas on what could be wrong? Not sure what to do since I cannot see it on the network and there is no other means to connect to the device other than IP?
0
 
LVL 2

Expert Comment

by:alvin602
ID: 24319838
If the switch was never previously configured, it will have a default IP address of 192.168.1.254.  You will need to connect a computer to it on the same subnet, and then connect to it via a web browser by pointing to it at http://192.168.1.254.  Then you can change any settings, or IP address, or DHCP setting to get address from DHCP server.

If it was previously configured, and you do not know what the config is, you can reset the device to factory defaults by holding the reset button for more than 10 seconds.  If this device is online and in use, it will disrupt anything connected to it if reset.
0
 
LVL 2

Author Comment

by:thursdasy
ID: 24321203
It should be at its factory default settings. I went and checked my DHCP records and it isn't requesting / has an IP address. I also checked 192.168.1.254 there was nothing. Well I checked 192.168.10.254 since our DHCP ip range is .10 not .1
0
 
LVL 2

Accepted Solution

by:
alvin602 earned 500 total points
ID: 24336776
If it is still at factory settings the switch IP will be 192.168.1.254 NOT 192.168.10.254, regardkless of what your network is set to.  You need to manually configure a workstation to 192.168.1.x, and connect it directly to the switch so it can talk to it.  It won't talk to anything else, but at least you will be able to configure the switch.
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Upgrading from Sonicwall Tz210 6 34
IP range 6 59
Port to open for RDP connection to VM in DMZ ? 5 62
Unable to login to Cisco C800 Ver 15.3(3)M4 8 8
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question