109
3.12.4 PORT MIRROR
Port mirroring is a tool that allows User to monitor data being transmitted through a specific port. This is done by
setting up another port (the mirror port) to receive the same data being transmitted from, or both to and from, the
port under observation. Using a mirror port allows the network administrator to sniff the observed port to keep tabs
on network activity. Any traffic that goes into or out of the Source Port(s) will be duplicated at the Destination Port.
This traffic can then be analyzed at the Destination port using a monitoring device or application. A network
administrator will typically utilize this tool for diagnostics, debugging, or fending off attacks.
The configuration and settings explain as following.
TERMS
DESCRIPTION
Port Mirror
Select Enable/Disable to enable/disable Port Mirror.
Source Port
This is also known as Monitor Port. These are the ports User wants to monitor. The traffic
of all source/monitor ports will be copied to destination/analysis ports. User can choose a
single port, or any combination of ports, but User can only monitor them in Rx or TX only.
Click on checkbox of the Port ID, RX, Tx or Both to select the source ports.
Destination Port
This is also known as Analysis Port. User can analyze the traffic of all the monitored ports
at this port without affecting the flow of traffic on the port(s) being monitored. Only one
RX/TX of the destination port can be selected. A network administrator would typically
connect a LAN analyzer or Netxray device to this port.
Once User finishes configuring the settings, click on
Submit
to apply the settings.
