Doctor John wrote:
> Francois Labreque wrote:
>> Be sure to put a cross-over cable between the hub and the switch!
>>
>> This being said, unless Andrew doesn't care about his job, I wouldn't 
>> recommend playing around with the network like that.
>>
>> Problem 1:  Both the switch and router are probably set to full 
>> duplex.    If the sniffer or hub sends packets, it may cause 
>> collisions that would look very suspicious on a full duplex link  (I'm 
>> assuming that one of the reasons to go to Cisco hardware 2 years ago 
>> was for remote management)
>>
> IIRC it is possible to sniff invisibly (not a pun). Somewhere at home I 
> have the Snort Cookbook and I'm sure it has a description of how to do 
> it. I'll post here if I ever find it amongst the couple of thousand 
> books we have at home.
> 
> John

http://www.snort.org/docs/tap/

Not quite what I was looking for, but this might work

John

-- 
"Eppur si muove" - Galileo Galilei

Post a reply to this message