Network TAP

edit

Hey,

it depends on the problems you want to solve. If you are into layer 1 problems you MUST use a real TAP such as the ProfiShark. But if you want to capture traffic for analyzing layer 2-7 stuff, you might have a look at the Netgear GS108Tv3 which offers you a monitor port. ;)

For more information on how to capture traffic correctly have a look at the capture playbook from Jasper: https://blog.packet-foo.com/the-netwo...

Cheers, Johannes

"depend on what you need to do with the device"

There is a list (may be out of date) on the Wiki - TapReference
Using a switch in monitor mode: Capture using a monitor mode of the switch
Walk through on setting up a Netgear: Turning a NetGear GS105E into a network monitoring device
There are also videos on setting up a Switch Flex Mini with a monitor port.

midBit Technologies has a family of relatively low-cost taps. I have the SharkTapUSB version and it did the job for me the few times I needed it.