On Mon, 12 Jun 2006, Tim Wilson wrote:
> After my initial attempt to do some packet sniffing was unsuccessful I 
> decided to make a bit of a project of it. I built a simple passive 
> ethernet TAP from the instructions at:
>
> http://www.snort.org/docs/tap/
>
> Unfortunately, I still haven't got any more info. I put the TAP between 
> my Linksys (Vonage-enabled) router and my cable modem and set up my 
> laptop so it would have a static IP on the same network as my external 
> IP (netmask 255.255.254.0 in my case). I started up ethereal and didn't 
> capture a single packet from either TAP port.
>
> Has anyone ever used one of these homebuilt TAPs before? Am I using it 
> correctly?

Easier way: dig a 4-port+ hub out of your closet. Plug cable modem, 
vonage, and sniffer into it. Enjoy.

------------------------------------------------------------------------
| nate carlson | natecars at natecarlson.com | http://www.natecarlson.com |
|       depriving some poor village of its idiot since 1981            |
------------------------------------------------------------------------