Jeff, a customer, has requested a solution to allow all internally and externally bound traffic to be monitored. Which of the following would allow a packet sniffer to do this?
Answer Description
Enabling port mirroring on a network device, usually a switch, will duplicate all network traffic out a single network port so a packet sniffer may then record the traffic.
Wikipedia
Port mirroring is used on a network switch to send a copy of network packets seen on one switch port (or an entire VLAN) to a network monitoring connection on another switch port. This is commonly used for network appliances that require monitoring of network traffic such as an intrusion detection system, passive probe or real user monitoring (RUM) technology that is used to support application performance management (APM). Port mirroring on a Cisco …
Port mirroring - Wikipedia, the free encyclopedia