This wiki has been migrated to and is now deprecated. Please use that site instead.

Switch Reference

The following pages show which analysis features are present on different managed switches. See also: HubReference, TapReference, CaptureSetup.

As noted in the Wireshark FAQ, capturing in a switched network environment can prove to be challenging. An individual switch port will receive broadcast, multicast, and unicast traffic destined for that particular port. In most cases it won't receive unicast traffic for other ports, which is what you're probably trying to capture.

Most midrange and high-end switches have port analysis or port monitoring features that will let you mirror the traffic from one port to another.

The EffeTech HTTP Sniffer FAQ gives some information on switch manufacturers and switch models that support port mirroring. They don't give details, however.

Dualcomm Technology has a series of low cost mirroring Ethernet switches.

midBit Technologies, LLC has a low cost, dedicated 10/100 switch pre-configured as a tap. Available through Amazon: []

Review of Dualcomm 5-Port Pass-Through Port Mirroring Switch (by Betty DuBois), posted on April 29, 2010

Do we have any information on ASUS Giga X Series (2048 and 2024) Switches? Contemporary Controls has released a 'Diagnostic Switch' which is configurated for port mirroring and supports 100MBits, auto mdx The price is about 100 Euro (shipment and VAT included). It's based on the RTL8306SD Switch controller and a configuration EEPROM. Possibly there exist other switches (the Dualcomm?) that uses the same chipset and might be put into port mirror mode just by adding a configuration eeprom? This then should be added to the 'Ethernet TAP DIY' section .... news from the RTL8306SD front: It looks as if some of the Linksys WLAN router have this chip in the switch section - and therefore might be used as monitor switch(see Linksys )

SwitchReference (last edited 2015-08-19 11:08:48 by darragh.delaney)