I need a sniffer!

[Gazman]

I have a Cisco 2610 configured with just one BRI interface.
It's connected to a MS Small Business Server using MSProxy 2.1. It works ok but the router keeps dialling randomly when it's not told to. I've set up an access list that expressly forbids all netbios traffic but it still dials out. I keep reading about people in the forum who have "put a sniffer" on the port to check the traffic. How do I do this ? I need to expicitly detect ip and port number request traffic.

 

[wybnormal]

You need some type of sniffer software, a cheap hub so you can go intrusive on the segment that the router ethernet port is on, set up a custom filter to grab ONLY the IPs you are interested in AND Netbios traffic. Use google and search on packet sniffer and there are several that come back aside from the standard NAI Sniffer.

Mike S

 

[Gazman]

Thanks Mike. I'll give it a try.

 

[ariev]

Try looking for a sniffer called Ethereal. It's under GNU license and works on windows and linux (100% free)

If you have a small network, you can enable debugging on all ip traffic, but it's very risky...

Arie