Matthew Miller wrote: >>Ethereal can capture that just fine in promisc mode... > > > But, if it's a switched network, you'll need to actually be somewhere in the > path his packets are travelling. > not unless you have access to the switch and issue a spanning-tree session.. Then you can monitor ANY port on that switch. A