Re: Sniffer - Where to install

From: Sam Salhi [MSFT] (samers_at_online.microsoft.com)
Date: 06/02/03 

Date: Mon, 2 Jun 2003 09:36:49 -0700

I am glad you're interested,
In a segmented network, the SMS version allows you to check everything on
the same segment, (in case of a hub, anything that goes on that network) and
Not through the segments.
So anything that passes on a network, can be picked up by NETMON, even if
the traffic is not intended for the same machine that NETMON is working on.
It's a Domain Administrators tool to help them identify network issues,
that's why something like this is available 

-- 
===========================================================
This posting is provided "AS IS" with no warranties and confers no rights
===========================================================
"Andy H" <andyh@dev.null> wrote in message
news:Xns938EC150644Dandydevnull@204.127.204.17...
> How does that work Sam?
> What gives it the ability to sniff everything on the network?
>
> If traffic doesn't pass across the NIC then how does it gather the
> information? Especially in a switched/segmented network where traffic
isn't
> repeated to each device.
> The SMS version allows this?
>
> Very curious.  Never tried the netmon sniffer.
>
> Thanks
>
> A
>
> "Sam Salhi [MSFT]" <samers@online.microsoft.com> wrote in
> news:uVvijWMKDHA.1828@TK2MSFTNGP10.phx.gbl:
>
> > I thought I gave that away when I specified the edge of the network,
> > but you're absolutely correct,
> > If a person wants to sniff some traffic, using the standard NETMON
> > (not the one that is capable of sniffing entire network traffic) Then
> > the sniffer should be located on the machine that will either act as a
> > Client or a server of the service being requested.
> > With that said, this isn't the case for the SMS version of NETMON,
> > since any machine on the network with this version will be able to
> > sniff everything going on the network.
> >
>

Relevant Pages

  • Re: AppleTalk and Netatalk redeux
    ... I think a segment is simply all the devices on the same cable. ... These are roughly analogous to an ethernet hub for the AsanteTalk, and an ethernet router for the Gatorbox. ... With the AsanteTalk, you want the netatalk machine to be the network manager, called a seed router. ...
    (comp.sys.apple2)
  • Re: CCR in geographically disperse data centers
    ... The FSW can be on a third network segment/subnet, including in a third data center location if you want automatic failovers in case of a site failure. ... switchA into VLAN5 then serverCCR2 on switchB into VLAN5 and they ... think they are on the same non-routing segment? ...
    (microsoft.public.exchange.admin)
  • Re: Sniffer - Where to install
    ... interested in keeping an eye on, iris is the bomb. ... >In a segmented network, the SMS version allows you to ... >the same segment, (in case of a hub, anything that goes on ... NETMON is working on. ...
    (microsoft.public.win2000.security)
  • Re: Problem seeing all machines in workgroup
    ... > Only the PDC has the ability to get the browse lists from the segment ... > return the combined browse list to the segment master browsers. ... > So basically both the browser service itself and the way that the ... install or allow to put a machine up on the network. ...
    (microsoft.public.windows.server.networking)
  • RE: [fw-wiz] Maximum number of subnets on a firewall
    ... Indeed network connectivity from any subnet to any subnet is on a need ... trying to create a connection from anywhere to anywhere. ... segment is considered a weak link and to avoid exploiting it all devices on ...
    (Firewall-Wizards)