Re: [tcpdump-workers] sniffing HTTP traffic to load-balancer on a

2010-11-02 Thread Andrej van der Zee
Hi, Thanks for pushing me in the right direction. I will have to find out the network-layout of our client somehow, but most likely it is not directly connected to the WAN. Thanks again, I will get back as soon as I have more info. Cheers, Andrej On Tue, Nov 2, 2010 at 4:15 PM, Guy Harris wro

Re: [tcpdump-workers] sniffing HTTP traffic to load-balancer on a

2010-11-02 Thread Guy Harris
On Nov 2, 2010, at 12:05 AM, Andrej van der Zee wrote: > The idea is to sniff all incoming/outgoing traffic on the WAN side of > the load-balancer, Is the "WAN side" implemented as: some form of WAN (a T{n} or E{n} serial line, or an OC{n} or STM{n} optical link) going directly into th

Re: [tcpdump-workers] sniffing HTTP traffic to load-balancer on a

2010-11-02 Thread Andrej van der Zee
Hi, Thanks for your emails. I am not sure the type of switch but I am going to try to find out. Will take some time though. The idea is to sniff all incoming/outgoing traffic on the WAN side of the load-balancer, I mean all external traffic of users that visit the web site hosted through the loa

Re: [tcpdump-workers] sniffing HTTP traffic to load-balancer on a dedicated machine

2010-11-01 Thread Guy Harris
On Nov 1, 2010, at 8:57 PM, Andrej van der Zee wrote: > Hi, > > I am looking for a solution that sniffs all HTTP traffic to the > load-balancer in a multi-tier web application, but WITHOUT starting > tcpdump on the load-balancer itself. Does the load balancer support some form of "mirror port"?

Re: [tcpdump-workers] sniffing HTTP traffic to load-balancer on a

2010-11-01 Thread Guy Harris
On Nov 1, 2010, at 9:42 PM, Jim Lloyd wrote: > You want some kind of port > mirroring And http://wiki.wireshark.org/SwitchReference for information and links to manuals about doing port mirroring - or whatever the switch vendor calls it - o

Re: [tcpdump-workers] sniffing HTTP traffic to load-balancer on a

2010-11-01 Thread Jim Lloyd
You want some kind of port mirroring . On Mon, Nov 1, 2010 at 8:57 PM, Andrej van der Zee < andrejvander...@gmail.com> wrote: > Hi, > > I am looking for a solution that sniffs all HTTP traffic to the > load-balancer in a multi-tier web application, but

[tcpdump-workers] sniffing HTTP traffic to load-balancer on a dedicated machine

2010-11-01 Thread Andrej van der Zee
Hi, I am looking for a solution that sniffs all HTTP traffic to the load-balancer in a multi-tier web application, but WITHOUT starting tcpdump on the load-balancer itself. The sniffing has to be isolated on a dedicated machine, without having to change anything to the web application itself. If t