Sniffing Route Propagation

I have three routers that I would like to watch propagate on my sniffer. Where should I place the hub? Can I set the ethernet port on one for port monitoring to see all router traffic?

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

cisco_trooper

If these are Cisco routers why don't you consider using the debug feature on them?

boostinbadger

They are Cisco routers (two 2610s & a 2620XM). I am also currently studying Wireshark and would prefer using it.

boostinbadger

What about port monitoring commands on one of my three switches?

boostinbadger

Also, if anyone has a unique or neat topology configuration recommendation I am interested. I don't have a bunch of equipment. This is what I have:

2620XM - WIC 2T
2612 - WIC 2A/S
2610 - WIC 2A/S

3 x 2924 switches

I also have a few old 10mb hubs and a couple dumb switches.

mikej412

Catalyst Switched Port Analyzer (SPAN) Configuration Example

Your 2900s should support SPAN, but not RSPAN.

boostinbadger

Thanks. I set up port monitoring on my single 2924 at home. Now I don't need a hub, etc..just my router and switch. Now I just need to figure out how to set port monitoring on one switch to monitor two others.

phreak

SPAN is a very useful feature on switches. I use it to debug our core once and a while.

Netstudent

boostinbadger wrote:

Thanks. I set up port monitoring on my single 2924 at home. Now I don't need a hub, etc..just my router and switch. Now I just need to figure out how to set port monitoring on one switch to monitor two others.

As Mike stated, 2924's will not support RSPAN.

boostinbadger

I see now what RSPAN means. I am getting ready to start the Switching portion of the Network Academy so I guess I will learn about all that then.