Port mirroring is used on a network switch to send a copy of all networkpackets seen on one switch port to a network monitoring connection on another switch port. This is commonly used for network applicances that require monitoring of network traffic, such as an intrusion-detection system. Port mirroring on a Cisco Systems switch is generally referred to as Switched Port Analyzer (SPAN); some other vendors have other names for it, such as Roving Analysis Port (RAP) on 3Com switches. A modular network switch with 3 network modules (a total of 24 Ethernet and 14 Fast Ethernet ports) and one power supply. ... Blue RJ-45 patchcord of the type commonly used to connect network devices. ... A packet is a formatted block of information carried by a computer network. ... An Intrusion Detection System (or IDS) generally detects unwanted manipulations to systems. ... A Cisco ASM/2-32EM router deployed at CERN in 1987. ... 3Com (NASDAQ: COMS) is a manufacturer best known for its computer network infrastructure products. ...
An example of a SPAN configuration on a Cisco 2950 Switch is below.
Mirror inbound and outbound traffic on a single interface, typically used to monitor uplink traffic from a workgroup switch.
The following commands configure portmirroring on a departmental switch where the probe is connected to port 4/1 and that the uplink is on port 4/2.
The following commands configure portmirroring for a backbone switch where the probe is connected to port 1/1 and where ports 1/2, 2/1 and 2/2 are to be monitored.
Portmirroring is used on a network switch to send a copy of all networkpackets seen on one switch port to a network monitoring connection on another switch port.
Portmirroring on a Cisco Systems switch is generally referred to as Switched Port Analyzer (SPAN); some other vendors have other names for it, such as Roving Analysis Port (RAP) on 3Com switches.
Spanning tree prevents duplicate packets from being received on looped ports by filtering packets from all but one of the looped ports (an example is when two switches are connected by two cables, thus creating a loop, one of these connections will be disabled by the Spanning tree function).
Feeds |
Contact