November 2019
Beginner
550 pages
13h 14m
English
SPAN allows a switch to create a copy of traffic on one or more ports and send the same copy out of another port. This configuration is usually done when a network security administrator wants to connect a protocol analyzer (sniffer) or an intrusion detection system (IDS) to the network to monitor for any security threats:

In the diagram, the attacker machine (running Wireshark) is connected to the Fast Ethernet 0/1 interface on a Cisco IOS 2960 switch, while the other devices are connected to the same network segment. Let's say we would like to get a copy of all traffic flowing between the Fast Ethernet 0/2, Fast Ethernet ...
Read now
Unlock full access