Buffered Ethernet Tee

[Nick Name]

Is anyone aware of a project/diy brew to build an active, buffered
Ethernet Tap that would only require a single NIC in the sniffing PC?

I'm currently using a couple of NIC's and a passive tap listening to the
xmit lines in both directions, but I'm thinking there must be some kind
of way to do a 'cheap' home brew 'mirror' of some kind?

Any pointers welcome. Thanks. Nick

 

[Jasen Betts]

On 2010-01-14, Nick Name <nick.name@nowhere.invalid> wrote:

Is anyone aware of a project/diy brew to build an active, buffered
Ethernet Tap that would only require a single NIC in the sniffing PC?

use a hub (if you can still find one)

(assuming you are only interested in IP traffic) you don't need two
interfaces to route packets between subnets.

I'm currently using a couple of NIC's and a passive tap listening to the
xmit lines in both directions, but I'm thinking there must be some kind
of way to do a 'cheap' home brew 'mirror' of some kind?

how do you plan to handle full duplex mode when listening with a
single NIC.


--- news://freenews.netfront.net/ - complaints: news@netfront.net ---

 

[Dave]

I think this guy doens't want to 'handshake', just sniff so he wont need
full duplex...
Remember iso layer 1, the physical layer. Its just bits, 1s and 0s.
You can't stop the flow or hinder the flow of data. You can 'repeat' the
data which is very simple.

 

[Jasen Betts]

On 2010-01-17, Dave <sysop@ischnauzer.com> wrote:

I think this guy doens't want to 'handshake', just sniff so he wont need
full duplex...
Remember iso layer 1, the physical layer. Its just bits, 1s and 0s.
You can't stop the flow or hinder the flow of data. You can 'repeat' the
data which is very simple.

if both ends are sending at the same time you need to either hardware
that can 'store and forward' packets, force the system to use half
duplex mode (eg, by using a hub instead of a switch), or run two ethernet
interfaces to listen.

--- news://freenews.netfront.net/ - complaints: news@netfront.net ---