I am looking for intructions or ideas on how to build an inline ethernet tap, I've found way to block Tx using a 47uf cap(here) but not how to tap. Simply putting a hub on the line would work but wheres the fun in that? Plus it would be a limiter in other configs. Anyone know how to build a non-powered 3 port hub? Splitting might be an option but that would increse draw and signal return, and I'm not one for killing ports randomly, or worse blowing up my modem and router. Keep in mind the monitor station can and prolly will have Tx blocked using the method mentioned above since stats will be served on another port. The idea is to use ntop ( Ntop here) as well as ethereal (here) to monitor and sniff my inet connections, additionally I might want to sniff router-> switch traffic. This is all facilitated through a server with 7 eth's and a fibre link so the cabling is all that remains. I'm using this setup @ work to monitor the servers and it works quite nicely, but we use a hub anyway. So share you links or stories or even theories... thanks
dc
edit: added link to 'stealth' eth mod
dc
edit: added link to 'stealth' eth mod