Revision history [back]

Hey,

it depends on the problems you want to solve. If you are into layer 1 problems you MUST use a real TAP such as the ProfiShark. But if you want to capture traffic for analyzing layer 2-7 stuff, you might have a look at the Netgear GS108Tv3 which offers you a monitor port. ;)

For more information on how to capture traffic correctly have a look at the capture playbook from Jasper: https://blog.packet-foo.com/the-network-packet-capture-playbook/

Cheers, Johannes