Having good monitoring also helps in that type of situation. Being able to monitor the uplinks of a switch with something like Netflow/Jflow also helps.
But always good to have a sniffer somewhere in the local network for SPAN/RSPAN ports.
Having good monitoring also helps in that type of situation. Being able to monitor the uplinks of a switch with something like Netflow/Jflow also helps.
But always good to have a sniffer somewhere in the local network for SPAN/RSPAN ports.