Switch Interface Properties - CompTIA Network+ N10-007 Prof Messer
-
-
Are port mirrors common for companies that monitor what employees are doing on the network or is something else used?
-
@mary said in Switch Interface Properties - CompTIA Network+ N10-007 Prof Messer:
Are port mirrors common for companies that monitor what employees are doing on the network or is something else used?
Port mirrors are generally used for troubleshooting issues. Monitoring what employees are doing this way would massively impact the network.
-
@mary said in Switch Interface Properties - CompTIA Network+ N10-007 Prof Messer:
Are port mirrors common for companies that monitor what employees are doing on the network or is something else used?
No, that would be insanely impractical. A port mirror doesn't give you a copy of what someone is actually doing, it gives you a copy of the network traffic. Which is a butt load of disconnected data. It's not like you would know what the end user was doing, only what was being transferred on the wire.
If you think about what you'd see on the wire... a single file transfer or LAN based action might generate a huge amount of traffic. Or going to a website might create a bunch of unintentional traffic from ads that aren't something that the end user cared about. Or a website or app open in the background might generate gops of traffic for something that isn't being used.
It would be able to tell you if the person is on YouTube or Spotify, but would not tell you what they are doing that for or if they are actively "using" that thing. Basically you'd be flooded with information that would take ages to sort through, and the resulting information would tell you essentially nothing about what the end user was doing.
