Ethereal-users: Re: [Ethereal-users] Using the snoop command to capture traffic between two devi

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gerald Combs <gerald@xxxxxxxxxxxx>
Date: Thu, 14 Aug 2003 08:45:59 -0500 (CDT)
On Thu, 14 Aug 2003, Higgins, Read wrote:

> I am trying to snoop traffic between two servers, and I am getting nowhere.
> I tried to run a simple test by snooping the traffic between my desktop and
> an edge switch via a solaris box, and nothing happened.  The command I used
> for this was 'snoop -v 216.118.178.15 192.168.192.50'.  Now when I run the
> 'snoop' command, or if I snoop to a particular address from the interface,
> it works fine.  Do I have to set up an RMON probe in order to see the
> traffic between two devices?  

Do you have SPAN / port mirroring configured on your switch?

    http://www.ethereal.com/faq.html#q5.1