sniff packets

[emadehsan]

Hello dear all,

I have some unwanted traffic on my switch port.

how can I findout IP addresses of the generator of these trafics?

thanks

[ankbhasi]

Hi Friend,

Which switch you are having on which you want to sniff the ports. You can configure SPAN on your switch and sniff the ports which ever you want.

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3750/12225see/scg/swspan.htm#wp1036816

EtherReal sniffer software will be one good option which you can have on your destination machine to capture traffic.

HTH

Ankur

*Pls rate all helpfull post

[rpsunbeam]

ps... etherreal is now wireshark

[network.king]

Hi ,

You can span your switchport traffic to another port and connect a pc with a sniffer or ethereal software to find the traffic

http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml#topic5

Hope this helps

regards

vanesh k

[pciaccio]

You can use the poor mans sniffer.. If your traffic goes through a layer 3 interface then you can enable route cache flow on the interface. capture the traffic, then do a show cache flow. it will show you the ip addresses source/destinations flows through the interface and ports they are using..