| 1 |
Actually they don't all cost a fortune. You can pick up a cheap managed |
| 2 |
switch these days. We have like 20 of these "Nortel Baystack 450"s at my |
| 3 |
company that we used to use for development for our NAC product. They sell |
| 4 |
on eBay for about $50, we've gotten some as cheap as $7 + shipping. Hell, |
| 5 |
I've found an Asanti IntraCore 3524 in great condition (that I have sitting |
| 6 |
here at my desk) laying by the trash pile that some other company in our |
| 7 |
building was tossing out. eBay for "managed switch" and sort by price, |
| 8 |
lowest first. |
| 9 |
|
| 10 |
Having said all that, I would just go with a software traffic monitor like |
| 11 |
the ones previously mentioned. Dealing with a manged switch is absolutely no |
| 12 |
fun unless you're either really into Layer 2 or 3 masochism, cryptic |
| 13 |
commands, and have a pant-load of computers you need vlans and stuff for. |
| 14 |
|
| 15 |
BTW, that 'trafshow' tool is pretty slick! I've never used it before. Thanks |
| 16 |
Drew Tomlinson. One bug that I notice though, is that I run several vhosts, |
| 17 |
and when I hit some of the web sites, they all show up as the same domain |
| 18 |
name. For example, I go to hit http://daevid.com and it shows up in the list |
| 19 |
as http://anotherdomain.com :-| |
| 20 |
|
| 21 |
Daevid Vincent |
| 22 |
Lockdown Networks: Real NAC Right Now! |
| 23 |
Senior Software Engineer | Architect | Founder |
| 24 |
206.285.8080.104 |
| 25 |
100 West Harrison Street, North Tower, Suite 300 | Seattle, WA 98119 |
| 26 |
|
| 27 |
> -----Original Message----- |
| 28 |
> From: Alan McKinnon [mailto:alan.mckinnon@×××××.com] |
| 29 |
> |
| 30 |
> There's one other way that I just remembered (for future |
| 31 |
> reference). You |
| 32 |
> don't *have* to use a linux machine as a gateway if you have a decent |
| 33 |
> managed switch - set it to route all traffic on all ports out through |
| 34 |
> the port that a monitoring machine is connected to. In other words, |
| 35 |
> that one part acts like a hub. Now that the monitoring |
| 36 |
> machine can see |
| 37 |
> every bit on the entire Ethernet, it can count 'em :-) |
| 38 |
> |
| 39 |
> However, these switches cost a fortune and I very much doubt that the |
| 40 |
> el-cheapo ADSL routers on the market have this feature. Both of mine |
| 41 |
> certainly don't. |
| 42 |
|
| 43 |
-- |
| 44 |
gentoo-user@l.g.o mailing list |
Archives