[c-nsp] tcpdump on ios?

[Tony Li]

On Jan 11, 2008, at 5:21 PM, Kim Onnel wrote:

> IMHO, it is very difficult to design a router that will capture  
> traffic
> being hardware switched, am i correct?


This is correct.  What do you do with the data?  Without dedicated  
high bandwidth storage, there's no place for it to go.

Alternately, you can look at Lawful Intercept approaches, where  
traffic is duplicated and not captured.

Tony