Hi,
I recently starting to work with Juniper product. I'm also studdying to complete JNCIS-SP certification exam.
Recently I've been task to write a procedure to run packet capture on device we are using at the office. We have some Juniper product in place, switches, router, and firewall.
In the eLeaning course, I understood that the port mirroring is the equivalent feature from Juniper of what I learn to used before with Cisco product with span port or port monitor fonctionnality.
But on Juniper product I understood that the computer running WireShark software should be configured with an IP address, which is deffirent then what I usually do with Cisco product in which the NIC card on which capture is running the interface is configured in promiscuous mode. I would like to know if I understand well and how WireShark will capture trafic is it going capture the packet with the header of the packet between the network equipement and the WireShark computer of this information layer will be strip of in some manner.
Thank you.
------------------------------
Xine
------------------------------