Packet/Protocol Analyser
Physical:
Port-mirror,SPAN (Switch Port Analyzer),RSPAN
Basically you connect your Laptop to a Port or Group ports with same Vlan in promiscous mode.
promiscous mode accetps all traffic.
Linux Packet capture :TCPDUMP and Wireshark tcp anaylse the traffic.
Step1:Configure promiscuous mode to a new Portgroup.
Step2:Your packet capture VM where Wireshark is installed should be on the same portgroup where promiscous mode is conifgured.
TCPDUMP:
-i =specify the interface
-v =Verbose
-W =Write packets to a file
-r =Read packets from a file
tcpdump -i vswif0 host <ipaddress> to watch DNS traffic,arp traffic becoz of DNS lookup
Virtualize your dreams by Virtulizing your Applications,Servers,Networks and Desktops. Welcome to the Era of Cloud Computing .Go green in all the Datacenters.
No comments:
Post a Comment