cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
452
Views
0
Helpful
1
Replies

SPAN session with IDS module after IOS upgrade to 12.2(18)SXF10a

Martin Kyrc
Level 3
Level 3

hello guys,

I upgraded c6500 IOS to 12.2(18)SXF10a with IDS module. I need create monitor session, but one still exists and I can't remove it.

BB5-RS-DMZ-04>sh mod 9

Mod Ports Card Type Model Serial No.

--- ----- -------------------------------------- ------------------ -----------

9 8 Intrusion Detection System WS-SVC-IDSM-2 SAD084302G1

Mod MAC addresses Hw Fw Sw Status

--- ---------------------------------- ------ ------------ ------------ -------

9 0003.e471.80e2 to 0003.e471.80e9 5.0 7.2(1) 5.1(4) Ok

Mod Sub-Module Model Serial Hw Status

---- --------------------------- ------------------ ----------- ------- -------

9 IDS 2 accelerator board WS-SVC-IDSUPG ADEI4201890 2.3 Ok

Mod Online Diag Status

---- -------------------

9 Pass

BB5-RS-DMZ-04#sh moni sess all

Session 2

---------

Type : Service Module Session

Modules allowed : 1-9

Modules active : 9

this session is not possible to delete (reason: maybe it's not local session, but Service Module Session. what that it's mean?):

BB5-RS-DMZ-04(config)#no monitor sess 2

% Session 2 used by service module

BB5-RS-DMZ-04(config)#monitor session 1 destination remote vlan 346

% Remote Source Session limit has been exceeded

can anybody help me?

1 Reply 1

jsivulka
Level 5
Level 5

To remove the monitor session power down the IDS module from the switch and power it back up. You can do this with the command "no power enable mod ". After reboot give the command: "no monitor session servicemodule".

Review Cisco Networking products for a $25 gift card