Example: Network of company A has 5 VLANs: Accounting, IT, Guests, Servers, Board.
All VLANs has DHCP servers enabled in their own VLANs. I am monitoring a single VLAN for DHCP packets by connecting my own PC into one of those networks. Using Fingerbank API (to fingerprint devices using DHCP packets) I can happily fingerprint those devices using above API to get knowledge what kind of device it is.
But I wish to have a single computer be able to see ALL broadcast packets from ALL VLANs. I know I can use SPAN for receiving mirror of network traffic, but I am not sure whether it is possible to see ARP/DHCP packets aswell. Any solution to this case or I have to use 1 VM for 1 VLAN separately?
I cannot imagine doing this within a company having 30 or more VLANs just to monitor DHCP packets.
For reference I use Cisco switches.