Wireshark-users: Re: [Wireshark-users] Looking for a portable sniffing-friendlyhub/switch
: Lee <ler762@xxxxxxxxx
: Mon, 12 Apr 2010 14:59:53 -0400
One difference between the $1K tap and the DIY version might be that
the expensive one will work wherever you put it in your network.
The DIY version instructions to
Strip the cat 5 cable and untwist all the individual wires.
I believe makes it not cat 5 any more. It's probably still good
enough for it's intended purpose - ie. at home & cheap - but maybe not
such a great idea to use on a critical link at work. (which isn't
going to stop me from trying to make one myself :)
Thanks for the link to the DIY taps - I hadn't seen those before.
On 4/12/10, RUOFF, LARS (LARS)** CTR ** <lars.ruoff@xxxxxxxxxxxxxxxxxx> wrote:
> thanks to all who have contributed!
> First of all, i'd like to say that i fully understand the point of the TAP
> But I should have added that most of my sniffing use cases are related to
> network or application layer stuff (mostly VoIP) on low bandwidth links.
> So with this in mind, i go 100% with the comment of Martin and think that a
> port mirroring switch will do the job better for most of my needs.
> (But i'm still looking forward to use a tap sometime)
> As for another provocative question to through into the arena, what's the
> difference between this one...
> ($1,095.00! *yuck*)
> ...and that one:
> or for some more details:
> What are the limits of the second type of "solution" in practice?
> Another question, purely technical:
> When using a tap, what's the sniffing process:
> Sniff simultaneously on 2 NICs on same PC (2x dumpcap), then merge the files
> with mergecap?
> Any other hub/switch recommendations?
> PS: I will add the info to the Wiki.
>> -----Original Message-----
>> From: wireshark-users-bounces@xxxxxxxxxxxxx
>> [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Guy Harris
>> Sent: dimanche 11 avril 2010 22:00
>> To: Community support list for Wireshark
>> Subject: Re: [Wireshark-users] Looking for a portable
>> On Apr 11, 2010, at 12:56 PM, Guy Harris wrote:
>> > The right place might be
>> > http://wiki.wireshark.org/CaptureSetup/Ethernet
>> > as it already has some information on this.
>> I've added a link to that from the front page, just as
>> there's a link to CaptureSetup/WLAN.
>> Sent via: Wireshark-users mailing list
>> Archives: http://www.wireshark.org/lists/wireshark-users
>> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users