Passive traffic analysis requires that the traffic to analyze is visible to the monitoring application. This is often a problem with switched networks as not all switches support port mirroring, and network taps are rather costly for small/mid-sized companies.
In order to allow everyone to analyse networks traffic at a low cost, nMon has created a cheap traffic mirror solution based on a non-blocking network switch that allows traffic to be passively mirrored towards a probe application such as ntop and nProbe.
This solution is totally transparent to the network and it is quite reliable as it is not PC-based, it has no moving parts and it is able to operate at wire-speed.
Selected switch ports can be configured to mirror traffic towards one (or more) monitoring port where the network probe is active. It is possible to aggregate on the monitoring port both traffic directions (RX and TX) or to mirror individual directions to different ports similar to network taps. More mirroring ports can be enabled at the same time.
nMirror is available on the nMon online shop.
| 