[TriLUG] DHCP Problems and a Network Tap

[Sean Alexandre]

On Mon, Feb 17, 2014 at 01:12:08AM -0500, Pinkham wrote:
> Running tcpdump on the router should give you what you need, modulo any
> hardware problems. Just dump to a file and analyze with wireshark on
> your laptop, if that's what you're comfortable with.

Yes, thanks, that's what I'm doing. I run tcpdump on the firewall and then scp
the file over to where I can look at it in wireshark, and compare it to what
the laptop's seeing.

> Otherwise, the 750 series Mikrotik routers are about the cheapest way to
> do port mirroring(~$45 for 100Mb, ~$60 for 1Gb) and you get a device
> that's also useful for other things.  Similarly, picking up a 8 port
> smart managed switch like the HP 1810-8g or Cisco SG200-08 for about
> $100 gives you another toy you might find useful in the future as well
> as solving your current problem.

Interesting, thanks.