RE: Port mirroring detection

From: Milind Nanal (milindyn_at_rolta.com)
Date: 12/15/04

  • Next message: L. Walker: "Re: Volunteer pen testing"
    To: John Madden <chiwawa999@yahoo.com>, pen-test@securityfocus.com
    Date: Wed, 15 Dec 2004 10:51:23 +0530
    
    

    Depends.. In case of Intel switch the port color changes from green to amber
    in case you mirror the port. So by just looking at the switch you can make
    out the difference.

    Regards,
     
    Milind
     
    ****************************************************************************
    *************
    NOTHING IS IMPOSSIBLE, Because Impossible itself says - I'M POSSIBLE
    ****************************************************************************
    *************

    -----Original Message-----
    From: John Madden [mailto:chiwawa999@yahoo.com]
    Sent: Tuesday, December 14, 2004 9:08 PM
    To: pen-test@securityfocus.com
    Subject: Port mirroring detection

    Hi,

    Is there a way to find out if a switch port is doing
    port mirroring besides looking at the configuration on
    the switch ?

    Thanks

                    
    __________________________________
    Do you Yahoo!?
    Meet the all-new My Yahoo! - Try it today!
    http://my.yahoo.com
     


  • Next message: L. Walker: "Re: Volunteer pen testing"

    Relevant Pages

    • Re: about mirroring port
      ... >also keep in mind port mirroring on a switch for the most part isn't ... >port mirroring on it. ... >I think it usually just copies the traffic on the switch itself. ... Exploiting Web Applications- A Step-by-Step Attack Analysis ...
      (Focus-IDS)
    • Re: Cat 2924
      ... Copyright 1986-2004 by cisco Systems, ... BOX in both H/W and S/W, compared to a C2924-XL Switch... ... FastEthernet0/1 failed front-end loopback test ... to make the port configuration "visible", you need to apply 2 commands ...
      (comp.dcom.sys.cisco)
    • Re: Cat 2924
      ... Copyright 1986-2004 by cisco Systems, ... BOX in both H/W and S/W, compared to a C2924-XL Switch... ... FastEthernet0/1 failed front-end loopback test ... to make the port configuration "visible", you need to apply 2 commands ...
      (comp.dcom.sys.cisco)
    • Gigabit Flexibility with Magnum 6K32T Managed Switch from GarrettCom, Inc.
      ... THROUGHPUT WITH MAGNUM 6K32T MANAGED SWITCH ... Gigabit port capability to four Gb ports when compared to the ...
      (comp.dcom.lans.ethernet)
    • Gigabit Flexibility with Magnum 6K32T Managed Switch from GarrettCom, Inc.
      ... OF GB THROUGHPUT WITH MAGNUM 6K32T MANAGED SWITCH ... Gigabit port capability to four Gb ports when compared to the ...
      (sci.engr.control)