Buffered Ethernet Tee

Thu Jan 14, 2010 3:11 pm   

Is anyone aware of a project/diy brew to build an active, buffered
Ethernet Tap that would only require a single NIC in the sniffing PC?

I'm currently using a couple of NIC's and a passive tap listening to the
xmit lines in both directions, but I'm thinking there must be some kind
of way to do a 'cheap' home brew 'mirror' of some kind?

Any pointers welcome. Thanks. Nick

Sat Jan 16, 2010 9:05 am   

On 2010-01-14, Nick Name <nick.name_at_nowhere.invalid> wrote:

use a hub (if you can still find one)

(assuming you are only interested in IP traffic) you don't need two
interfaces to route packets between subnets.


how do you plan to handle full duplex mode when listening with a
single NIC.


--- news://freenews.netfront.net/ - complaints: news_at_netfront.net ---

Sun Jan 17, 2010 5:49 pm   

I think this guy doens't want to 'handshake', just sniff so he wont need
full duplex...
Remember iso layer 1, the physical layer. Its just bits, 1s and 0s.
You can't stop the flow or hinder the flow of data. You can 'repeat' the
data which is very simple.

Sun Jan 17, 2010 8:14 pm   

On 2010-01-17, Dave <sysop_at_ischnauzer.com> wrote:

if both ends are sending at the same time you need to either hardware
that can 'store and forward' packets, force the system to use half
duplex mode (eg, by using a hub instead of a switch), or run two ethernet
interfaces to listen.

--- news://freenews.netfront.net/ - complaints: news_at_netfront.net ---