Poor mans TAP

Mon Oct 7 14:32:26 UTC 2019

Most smart switches do port mirroring. But I've had the predecessor to that tap for a few years. It has always worked well.

Ray Orsini
Chief Executive Officer
OIT, LLC
 305.967.6756 x1009 |  305.571.6272
 ray at oit.co |  www.oit.co
 oit.co/ray
-----Original Message-----
From: NANOG <nanog-bounces at nanog.org> On Behalf Of John Kristoff
Sent: Monday, October 7, 2019 10:29 AM
To: nanog at nanog.org
Subject: Re: Poor mans TAP

On Mon, 7 Oct 2019 14:16:31 +0000
Dovid Bender <dovid at telecurve.com> wrote:

> Funds at my 9-5 are limited. Has anyone tried this and how well does 
> it work? We plan on mirroring about 800 megs of traffic at peak.
> https://www.amazon.com/Dualcomm-1000Base-T-Ethernet-Regeneration-Netwo
> rk/dp/B0055M5JL8?ref_=ast_bbp_dp

I don't know if it still works on modern switches, but many years ago I was able to have Cisco LAN switches configured such that a single L2 MAC address could be statically associated with multiple interfaces (i.e. router interface).  This made it possible to duplicate all traffic to destined to one station to appear on two (maybe more?) ports.
You might try this also if you have an unused and available switch.

John