Have a question about monitoring a port on 4500, command is
"monitor session 1 source interface Gi3/5
monitor session 1 destination interface Gi7/46", The sniffer is on 7/46 and monitoring server is on 3/5.
But I looked at the capture session, there are some session (unicast) even destination IP is not the server are captured ? My understanding is only source or destication IP/MAC of the server are captured on port 3/5, but why I can see other sessions?