Skip to main content
Share Your Experience: Take the 2024 Developer Survey
3 votes
Accepted

Which TAP is the right one for my network?

Is the TAP 1-0 (see Ref below) the right one for my environment? It matches your Ethernet speed. That's the minimum requirement. You have to consider other requirements below. Technically seen, ...
Ron Trunk's user avatar
  • 67.7k
3 votes
Accepted

Influence of a TAP

It seems unlikely that all the network traffic passes through a single 100 Mbps cable. Remember that with switched ethernet, a switch will send traffic directly from the source to the destination ...
Ron Maupin's user avatar
  • 99.8k
3 votes

Tapping Nexus 5k FEX uplinks

It's not plain Ethernet. There are a bunch of headers being applied to each frame for VNTag that signify the source HIF port, particular forwarding details, etc. I'd strongly suggest just using SPAN ...
rnxrx's user avatar
  • 6,114
3 votes

Is there an "active" network tap (not just passive)?

It seems to me that you mis-understand the TAP concept. It only means that you duplicate a link. Then you are able for example : to forward the first TAP output link to the destination (or next hop) ...
vera's user avatar
  • 201
3 votes
Accepted

Is Wifi a broadcast medium?

If wifi/wlan is broadcast medium, can we tap the wifi traffic by just placing our wlan0 into promiscuous mode?. Yes, it is a broadcast medium, in the sense that only one transmitter can be on at a ...
Ron Trunk's user avatar
  • 67.7k
2 votes

Capturing traffic from multiple connections on a switch

This depends largely on your switch. E.g. on HP Provision switches, the monitored ports ingress and egress traffic is copied to the mirror port. When you monitor both port A and port B, you get A->B ...
Zac67's user avatar
  • 84.9k
2 votes
Accepted

Capturing traffic on wire from an endpoint

Wireshark will display packets for you, but it only shows the packets sent or received by the computer. If you want to see packets going to other computers, then you will either need an Ethernet hub, ...
Ron Trunk's user avatar
  • 67.7k
1 vote

Capturing traffic from multiple connections on a switch

As tap ports do not receive but transmit only, the switch has no clue who’s sitting behind the ports. The consequence is that it broadcast the packets to all ports. Incorrect. Switches learn the ...
Ricky's user avatar
  • 32.3k
1 vote
Accepted

Sensor to collector communication from SPAN, Inline or TAP

The real way to do this is to configure NetFlow on your network devices (routers and switches). If you insist on using a sensor for this, you will need to use SPAN if you have a single switch, RSPAN ...
Ron Maupin's user avatar
  • 99.8k

Only top scored, non community-wiki answers of a minimum length are eligible