Question Port mirroring help!

[Jackson5103]

I have the below network setup:

Router - Bt hub - working as just a modem set at lan IP 192.168.1.254 (provides internet connection)

Then connected is a tp link switch. Set at 192.168.1.253

Then another router connected to that switch - set at wan ip 192.168.1.90
LAN is set at 10.0.0.1

So I have a computer which is connected to the switch via wired. The IP setting of the adapter that’s connected to the switch is 192.168.1.25 as it wouldn’t let me set the IP as the 10.0.0.1 network, so had to connect to the BT hub.

Problem is when I set the port mirror up I’m only receiving copy of data of my own device’s sending and receiving, there’s no data from the router at 192.168.1.90.


Any help would be appreciated. I’m a bit of a novice and am learning still.

 

[DeauteratedDog]

Some screen shots of the switch configuration page would help, but in general:
Enable Port Mirror, set mode to ingress and egress
Select the router's port as the 'mirrored' port
Select the PCs port as the 'mirroring' port
Save the configuration.

You may need to set the PC's Ethernet card to promiscuous mode - that should be a setting on your capture tool.

Is this just educational or are you trying to accomplish some goal?

 

[Jackson5103]

Some screen shots of the switch configuration page would help, but in general:
Enable Port Mirror, set mode to ingress and egress
Select the router's port as the 'mirrored' port
Select the PCs port as the 'mirroring' port
Save the configuration.

You may need to set the PC's Ethernet card to promiscuous mode - that should be a setting on your capture tool.

Is this just educational or are you trying to accomplish some goal?

Thanks for the reply, its basically problems with people from outside then WAN getting access to our network somehow so i wanted to monitor the IP's that were incoming.

As i said i've got a netgear behind a BT smart hub and some how they managed to get past the smart hub and was on my netgear router, not sure how this was achieved as i thought the BT smart hub was very secure?

I have a theory which you may be able to help confirm or deny. So on the netgear there is a feature called netgear armour which is suppose to protect the network from threats, however i assume that it needs to have constant access to the netgear servers in order to upload information about devices and threats detected and it also can connect to my phone through an app. so is it possible that the netgear was causing the bt hub to constantly keep the necessary ports open for it to communicate with the servers of netgear?? and this is how someone got in maybe?

As maybe the netgear armour option should only be enabled when the netgear is working as the main gateway for all my devices rather than it passing the traffic on through the BT Hub?

I just don't know how this person got into the network or why there is still so much interest in my home network? I can see on the bt hub that there is still loads of DoS attacks which i assume are port scans in the logs. how do these ip keep tracking my hub even when the IP has changed? BT even sent a new Hub so its even got a new mac address and yet im still being probed.

Could you think of anything which could be drawing their attention to me in regards to my network setup? I've scanned the first 1000 ports from the WAN with my phone tethered to the computer and everything looks normal there is no unusual ports open.

Any advise would be great.

Thank you