Detecting multiple hosts behind a single managed switch port

Hello all,

I'm looking for a tool that can query a list of managed switches (both
Foundry and Cisco) via SNMP and return ports on those switches that
have more than one end host connected (based on MAC addresses). It
would need to filter out ports that are connected to other managed
switches in the list as well as ports that are setup as trunk links.

I know that there may be some configuration/modification involved in
whatever tool I find, I'm just looking for something that keeps me
from coding it from the ground up.

Any ideas?

Thanks,
Matt

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • Re: Detecting multiple hosts behind a single managed switch port
    ... I'm looking for a tool that can query a list of managed switches (both ... would need to filter out ports that are connected to other managed ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence in Information Security. ...
    (Security-Basics)
  • RE: Managed switches outside firewalls?
    ... Some of the managed switches I have worked with make it possible to turn ... off management of the switch on certain ports. ... switch for all ports but the one that comes from inside your network. ... Subject: Managed switches outside firewalls? ...
    (Security-Basics)
  • Re: about mirroring port
    ... number of them with the SPAN feature enabled and multiple spanned ports ... monitored by multiple instances of snort on a single Compaq box with very ... Subject: about mirroring port ... Higher end switches may work better. ...
    (Focus-IDS)
  • Re: Subseven Scans
    ... >RK> For more information on this free incident handling, management ... >RK> and tracking system please see: http://aris.securityfocus.com ... >I've seen quite a bit of traffic on ports tcp/12345 and tcp/27374. ...
    (Incidents)
  • Re: FreeBSD > 4.11 hardware issue with Asus PSCH-SR/SATA mobo
    ... Which is ironic, for management is ... I haven't had much trouble with that, but then the cheap switches were ... single netbios box broadcasting while the nbns works, and if it doesn't, ... fit just like they'd do after a power dip. ...
    (comp.unix.bsd.freebsd.misc)