Geek asks and answers

Questions for Network Analysis in Perl

I plan to do Network Analyzer for my dissertation, which uses SNMP to receive the MAC addresses of hosts connected to a managed switch. From there, I will receive packets passing through the switch through Port Mirroring, and then analyze it. For this I will use Perl. However, I have two questions.

  • Is there a way to scan aggregated switches? Say my software runs on PC A, which then connects to the SPAN port of switch A. Then, Switch A fa0 / 10 connects to Switch B fa0 / 10. I was told that if both fa0 / 10 are ports, you cannot receive packets from Switch B. Is this correct? If not, how will it work?

  • Does Perl support packet sniffing of packets from two different network adapters at the same time? Say the switch. The SPAN port is connected to NIC A, and the SPAN port of switch B is connected to NIC B. Is there a library in Perl that will allow me to mirror packets from both switches?

Sorry if any of the questions makes no sense. I find it difficult to express what my confusion is when my mind is already cluttered up as it is.

+3
source share
1 answer

1: Yes, that's true. You need to connect both switches with port mirroring.

2: This method is called forking / threading / event listen. It is possible to use these methods.

Here are a few pointers:

+1

More articles:


All Articles