sniff packets-HP3500

[mascarenhas2010]

I wan to sniff packets from 1 of the port on hp switch,to watch the user is sending and receiving. I m facing problems with CISCO NAC, how can i do it.any configuration example.

Switch is HP3500

Image stamp: /sw/code/build/btm(t2g)
Dec 7 2007 14:54:57
K.12.57
2415
Boot Image: Primary

[Michael_Breuer]

Hello,

assuming port 2 is our sniffer and port 1 the monitoring source port:

mirror 1 port 2
int 1
monitor all both mirror 1

Cheers,

Michael

[mascarenhas2010]

hello,

If i m connecting my PC on port 2 with wireshark installed i can capture all packets passwing through the port 1 by the above commands u have specified??????

[Michael_Breuer]

Indeed, thats the way it should work. Check out the "Management and Configuration Guide" Appendix B "Traffic Mirroring" for all detailed options.

Cheers,

Michael

[mascarenhas2010]

Hello Dear,

can u send me the link it will be appreciable.

Thanks

[Michael_Breuer]

http://cdn.procurve.com/training/Manuals/3500-5400-6200-6600-8200-MCG-Mar10-B-Monitor.pdf

Cheers,

Michael

[mascarenhas2010]

Hello

Pls confirm the Local and remote Mirroring configuration mentioned below is OK.

Source IP: 10.10.10.119
Source Port:9300
Dest IP:10.10.30.2
Dest Port:a15

Remote Mirroring:

Destination Switch:

Switch-C(config)# mirror endpoint 10.10.10.119 9300 10.10.30.2 port a15

Source Switch:

mirror 1 remote ip 10.10.10.119 9300 10.10.30.2

Local Mirroring:

mirror 1 port 24

int 2
monitor all both mirror 1

In Remote mirroring can we use destination cisco switch and source HP Switch?????????

Thanks

[mascarenhas2010]

Hello Dears,

I want to monitor 3 interfaces on 1 switch.Is the below config correct.My destination is port 24 and source port are different.It will work or not????????????

mirror 1 port 24
int 2
monitor all both mirror 1

mirror 2 port 24
int 16
monitor all both mirror 2

mirror 3 port 24
int 17
monitor all both mirror 3

Thanks