Re: [tcpdump-workers] sniffing HTTP traffic to load-balancer on a

2010-11-02 Thread Guy Harris
On Nov 1, 2010, at 9:42 PM, Jim Lloyd wrote: You want some kind of port mirroringhttp://en.wikipedia.org/wiki/Port_mirroring And http://wiki.wireshark.org/SwitchReference for information and links to manuals about doing port mirroring - or whatever the switch vendor calls it - on

Re: [tcpdump-workers] sniffing HTTP traffic to load-balancer on a dedicated machine

2010-11-02 Thread Guy Harris
On Nov 1, 2010, at 8:57 PM, Andrej van der Zee wrote: Hi, I am looking for a solution that sniffs all HTTP traffic to the load-balancer in a multi-tier web application, but WITHOUT starting tcpdump on the load-balancer itself. Does the load balancer support some form of mirror port? If

Re: [tcpdump-workers] sniffing HTTP traffic to load-balancer on a

2010-11-02 Thread Andrej van der Zee
Hi, Thanks for your emails. I am not sure the type of switch but I am going to try to find out. Will take some time though. The idea is to sniff all incoming/outgoing traffic on the WAN side of the load-balancer, I mean all external traffic of users that visit the web site hosted through the

Re: [tcpdump-workers] sniffing HTTP traffic to load-balancer on a

2010-11-02 Thread Guy Harris
On Nov 2, 2010, at 12:05 AM, Andrej van der Zee wrote: The idea is to sniff all incoming/outgoing traffic on the WAN side of the load-balancer, Is the WAN side implemented as: some form of WAN (a T{n} or E{n} serial line, or an OC{n} or STM{n} optical link) going directly into the

Re: [tcpdump-workers] sniffing HTTP traffic to load-balancer on a

2010-11-02 Thread Andrej van der Zee
Hi, Thanks for pushing me in the right direction. I will have to find out the network-layout of our client somehow, but most likely it is not directly connected to the WAN. Thanks again, I will get back as soon as I have more info. Cheers, Andrej On Tue, Nov 2, 2010 at 4:15 PM, Guy Harris

[tcpdump-workers] sniffing HTTP traffic to load-balancer on a dedicated machine

2010-11-01 Thread Andrej van der Zee
Hi, I am looking for a solution that sniffs all HTTP traffic to the load-balancer in a multi-tier web application, but WITHOUT starting tcpdump on the load-balancer itself. The sniffing has to be isolated on a dedicated machine, without having to change anything to the web application itself. If

Re: [tcpdump-workers] sniffing HTTP traffic to load-balancer on a

2010-11-01 Thread Jim Lloyd
You want some kind of port mirroringhttp://en.wikipedia.org/wiki/Port_mirroring . On Mon, Nov 1, 2010 at 8:57 PM, Andrej van der Zee andrejvander...@gmail.com wrote: Hi, I am looking for a solution that sniffs all HTTP traffic to the load-balancer in a multi-tier web application, but