From owner-freebsd-net  Fri Apr 19  6:14:58 2002
Delivered-To: freebsd-net@freebsd.org
Received: from mw1.texas.net (mw1.texas.net [206.127.30.11])
	by hub.freebsd.org (Postfix) with ESMTP id 46CDF37B416
	for <freebsd-net@freebsd.org>; Fri, 19 Apr 2002 06:14:55 -0700 (PDT)
Received: from staff3.texas.net (staff3.texas.net [207.207.0.40])
	by mw1.texas.net (8.11.6/8.11.6) with ESMTP id g3JDEsG26787
	for <freebsd-net@freebsd.org>; Fri, 19 Apr 2002 08:14:54 -0500 (CDT)
Received: (from msmith@localhost)
	by staff3.texas.net (8.11.6/8.11.6) id g3JDEsc36315
	for freebsd-net@freebsd.org; Fri, 19 Apr 2002 08:14:54 -0500 (CDT)
	(envelope-from msmith)
Date: Fri, 19 Apr 2002 08:14:54 -0500
From: Michael Smith <msmith@texas.net>
To: freebsd-net@freebsd.org
Subject: network traffic analysis with a network switch
Message-ID: <20020419081453.X30314@staff.texas.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-net.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-net>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-net>
X-Loop: FreeBSD.org

Not quite sure how to set this up, or even if it can be setup...
I have a windows box, a FreeBSD box (gateway) and a RH box all
connected to a 100base-T network switch.  The FreeBSD box
is then connected to a Cable Modem and a T1 router.

I have a program on the RH box that can snoop and analyze some of
the network traffic of the windows box, however due to the nature
of network switches, it never sees the traffic.  Don't ask about
the analyzer, I'm rather annoyed that it was written specifically
to compile and run only on RH and it's very close Linux relatives.

Here is a rough visualization of the setup.

   +-------------+   +----+
   | Cable Modem |   | T1 |
   +-------------+   +----+
               \      /
             +---------+
             | FreeBSD |
             +---------+
                  |
         +------------------+
         | 100base-T Switch |
         +------------------+
          /      |       \
+----------+   +----+   +----------+
| Windows1 |   | RH |   | Windows3 |
+----------+   +----+   +----------+

What I would like to be able to do is somehow send copies of
network traffic to the RH box without having to move it
between the FreeBSD box and the switch.  Is this possible
and if so, how would I go about setting this up?

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message