Split a 100MB ethernet connection for sniffing
Short of using a switch with a mirror port is there a good way to split a 100MB ethernet connection for sniffing so you can just sniff whats on that one line? In this case I dont want to do any kind of arp poisoning. I tried to use an old 10MB hub to split the connection but it did not work that well, best I could manage was half duplex. I'm making a new tutorial about Cain and it would help if I could figure it out. Thanks.
Re: Split a 100MB ethernet connection for sniffing
Quote:
Originally posted here by Irongeek
split a 100MB ethernet connection for sniffing
I'm not quite sure what you mean by this? Do you mean to monitor it? If this is the case a network tap would be the best idea. A hub works in the same manor except it can generate collisions which cause problems.