Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Wiring Mess

From: "Paul Marsh" <pmarsh@xxxxxxxxxx>
Date: Mon, 25 Jan 2010 08:52:24 -0500

Anyone know of a Windows solution similar to Netdisco?

 

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Forthofer Russ
Sent: Monday, January 25, 2010 8:32 AM
To: 'Community support list for Wireshark'
Subject: Re: [Wireshark-users] Wiring Mess

 

You could also use Netdisco, which would build the DB for you.

 


From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Michael Glenn
Sent: Friday, January 22, 2010 11:06 AM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Wiring Mess

Interesting thought: I wonder if I could pull the spanning tree tables off my switches via SNMP and use them to build a database of port to MAC connections. I already have a table of all the user workstations' MAC addresses.



>>> Andrew Gallo akg1330@xxxxxxxxx> 01/22/2010 08:47 >>
....
Two options I see:

Make a matrix of mac addresses to jack number/office numbers and then
look at the switch's CAM table.  You'll then see what port goes to what
office.

If the switch is running spanning tree, you could sniff each port and
look at the source MAC of the BPDU.  This should be the MAC address of
the connected switchport.


The information contained in this e-mail and any accompanying documents is intended for the sole use of the recipient to whom it is addressed, and may contain information that is privileged, confidential, and prohibited from disclosure under applicable law. If you are not the intended recipient, or authorized to receive this on behalf of the recipient, you are hereby notified that any review, use, disclosure, copying, or distribution is prohibited. If you are not the intended recipient(s), please contact the sender by e-mail and destroy all copies of the original message. Thank you.