Wireshark for Ethical Hackers - 6

Networking of Sniffing Crash Theory Practice - Part 2

Port Mirroring SPAN RSPAN

  • Mirrors incoming/outgoing frames from a port or a VLAN to a local interface or a Remote VLAN.
  • SPAN mirrors traffic to a destination port
  • RSPAN mirrors traffic to a Remote VLAN

Set up a lab in GNS3

image-20220316145003802

Configure router.

ping 10.0.1.2 repeat 1000000

Configure switch.

Switch(config)#monitor session 1 source interface g0/0
Switch(config)#monitor session 1 destination interface g0/1

image-20220316145228391

Capture the traffic and filter.

ip.addr==10.0.1.1 or ip.addr == 10.0.1.2

image-20220316145421872

Port Mirroring can drop frames!

Refer to:

https://gns3.com/

posted @ 2022-03-16 15:07  晨风_Eric  阅读(30)  评论(0)  编辑  收藏  举报