North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Legal intercept - 3550

  • From: Owen DeLong
  • Date: Wed Aug 11 13:10:44 2004

You might be able to do what yo want by hard-coding the CAM entries in the
catalyst so that it forwards the MAC addresses you're concerned about to
the port in question, but, that may or may not achieve what you want, depending
on the makeup of the MAC addresses in the 300mbps traffic and whether there
is a limited number of MAC addresses that apply only to the traffic that
interests you (destination field only).

Otherwise, you really need to feed this off to anothger GE interface and
use libpcap (snoop, tcpdump, ethereal) to filter stuff into a file.

Owen

Attachment: pgp00003.pgp
Description: PGP signature