This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Port mirror switch

0

Does anybody know where I can find a cheap switch with port mirroring/monitoring ability. I have search google and other common sites but want to know if there is any specific one anybody would recommend. I was going to just get a tap, but they are kind of expensive.

Thanks!

asked 25 Aug '12, 23:19

I_GEEK_IT's gravatar image

I_GEEK_IT
1556
accept rate: 0%

edited 25 Aug '12, 23:21

(26 Aug '12, 00:27) Anders ♦

2 Answers:

0

I have good experience with these switches. They are not overly expensive, especially the HP switch. They may not work in every environment (high network load, > 1 Gig), but for the "typical" application problems, they are good enough.

Cisco 2960-8TC-L

http://www.cisco.com/web/DE/verticals/smb/products/routers_switches/catalyst_2960_series_switches/index.html#~models

HP 1810-8G

http://h10010.www1.hp.com/wwpc/uk/en/sm/WF06b/12883-12883-4172267-4172281-4172281-3963985-3963989.html?dnr=1

Regarding a (cheap) tap, see the recommendations in this question:

http://ask.wireshark.org/questions/13814/where-can-i-find-a-good-tap

Regards
Kurt

answered 26 Aug '12, 01:18

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 26 Aug '12, 01:19

0

There's another great option around, the Netgear GS105E, a 5 port gigabit switch, where you can set the fifth port in monitoring mode in the web GUI.

http://www.netgear.nl/business/products/switches/prosafe-plus-switches/gs105e.aspx#

as Kurt said before, if you're not expecting 1 Gbit prolonged datastreams it'll do just fine.

answered 04 Nov '12, 10:54

Marc's gravatar image

Marc
147101316
accept rate: 27%

Marc, do you have personal experience with that switch? Can you recommend it?

(04 Nov '12, 12:02) Kurt Knochner ♦

It doesn't has a web GUI. You need the configuration software (provided) installed.

(07 Aug '14, 01:10) cmheng
(19 Jan '15, 04:35) castro145