On Mon, Jun 04, 2001 at 10:54:26PM -0700, Manan Sanghi wrote:
> I am having trouble getting tcpdump to capture packets
> other than those directed or originating from my
> machine. How can I monitor other traffic on the
> ethernet.
By
1) running tcpdump on an OS that allows applications that
capture packets to enable promiscuous mode on devices on
which captures are being done (I think all the ones that
tcpdump supports do);
2) doing the capture on a device whose driver, in that OS,
allows applications to enable promiscuous mode (most probably
do, but there may be some that don't - you'd have to ask
whoever supplied your OS whether your device does);
3) either doing all your captures on non-switched networks, or
setting the switch port into which your machine is plugged
into a mode where all traffic going through the switch is
"mirrored" onto the port (you'd have to find the
documentation for that switch and read that to find out how
to do that - I don't have any such documentation) - assuming
that the switch even supports that (if it doesn't, you're out
of luck, as far as I know).
Note that a "hub" might be a switched hub, so the fact that you're
plugged into a "hub" doesn't mean you're not plugged into a switch.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
