osx - Questions for Network Analyzing in Perl -
I am planning to create a network analyzer for my thesis, which receives the SNMP's MAC address of the hosts connected to the management Uses to Switch. From there, I will get the packets going through the switch through port mirroring, and then analyze it. For this, I'm using Perl though, I have two questions.
-
Is there a way to scan the switch altogether? Let's say that my software is running on PC A, which is then connected to switch A's span port. Then switch A's FFT / 10 interface is connected to FAT / 10 of switch B I was told that unless both FAT / 10 extension ports are there, you will not be able to get the pack from Switch B. Is it true? If not, how will it work?
-
Does Pearl support sniffing together packets from two different NICs? Assume that the SPAN port of switch A is connected to NIC A, and the SPAN port of switch B is connected to NIC B. Is there a library in Perl, which will allow me to mirror the packet together with both switches?
Sorry if no one is able to understand the question. I have a hard time coming in the form of my mind as my delusion has already been wasted as it is.
1: Yes, it is true that you need to connect both switches with port mirroring.
2: This technique is called forking / threading / listening to the event. It is possible to use these methods.
Here are some pointers:
Comments
Post a Comment