Software installation and deployment for network protocol analysis (1)

Some people often ask why I can only see my own communication? Why can't I see the Communication Status of XX? Is it software limitations? In fact, this kind of problem is not the limitation of the software, but caused by improper installation and deployment of the software.

We know that the network protocol analysis software works in sniffing mode. It must collect raw data packets in the network to accurately analyze network faults. However, if the installation location is incorrect, the collected data packets will be significantly different, which will affect the analysis results and cause the above problems.

In view of this situation, I think it is necessary to introduce the installation and deployment of the network protocol analysis software, but since there is not much time, I will briefly introduce it below.

Generally, the installation and deployment of the network protocol analysis software are as follows:

Shared Network

The network that uses the Hub as the network switch device is a shared network. The Hub works in the OSI Layer in the shared mode. If your lan's central switch device is a Hub, you can install the network protocol analysis software on any host in the LAN. In this case, the software can capture all the data communication in the network, the installation diagram is as follows.

Swap network with image Function

The network that uses a Switch as the center Switch of the network is a switched network. A Switch works on the data link layer of the OSI model. Its ports can effectively separate conflicting domains. The network connected by the Switch will separate the entire network into many small domains.

If the vswitch in your network has the image function, you can configure the port image on the vswitch, and then install the network protocol analysis software on the host that connects the Image Port, in this case, the software can capture all the data communication in the network. The installation diagram is as follows.

Swap network with no image Function