Port Mirroring on Allen Bradley 5700 Stratix Switch
Obtain a authority to connect prior to connecting anything to the mission partner network. Request username and passwords prior to connecting.
Setting up PuTTY
Connect your Serial cable to the Allen Bradley Ethernet port designed for Serial connection.
Open a terminal on your Linux device.
Open PuTTY to be able to serial into the switch
sudo putty
Select the Serial Radio button.
On the Serial Line enter /dev/ttyUSB0 then click open button.
Once the PuTTY terminal opens log in using the provided username/password from the MP.
The default username and password is no username and password switch
Pull the running configuration of the switch.
show run
Port mirroring all ports to unused port
configure terminal
monitor session 1 source interface 'fa1/1 - 1/8'
This will be the mirrored ports
monitor session 1 destination interface 'fa1/9'
This will be the unused port that you want all the mirrored ports to point to.
Save your changes
exit
write
Verify your changes
show run
Then exit PuTTY
exit
Disconnect your serial cable and plug in your ethernet cable into the port you mirrored the traffic to.
In a new terminal run a tcpdump.
sudo tcpdump -i 'eth0' -w ThisIsTheFileYoureWrittingTo.pcap
You will have a 'ThisIsTheFileYoureWrittingTo.pcap' file written to your current file location.