cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
374
Views
0
Helpful
2
Replies

mirroring ports in catalyst 29XX

alex.wirz
Level 1
Level 1

Hi,

I read the folowing text.

http://www.cisco.com/en/US/partner/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml

I have a doubt.

When i make a SPAN, the statistics of show int are the same?

example:

type configuration on fa0/5 port:

fa0/1

fa0/5

port monitor 1

type:

clear counters

wait some for trafic in fa0/1

show int fa0/1

show int fa0/5

the output statistics of input and output packets, bytes, etc of int fa0/1 is the equal??

2 Replies 2

michal.grzelak
Level 1
Level 1

Hi,

Could you please give more details, which interface is the source of traffic and which destination?

Show counters may differ, whenever you are copying tx, rx or traffic in both directions.

Looking forward to hear from you.

Michal

richf
Level 1
Level 1

Here is how I would set up your monitor session for sniffing a port.

monitor session 1 source interface Fa0/1

monitor session 1 destination interface fa0/5

That is assuming your sniffer is on port 0/5.

If you want to see if you are getting packets copied to inteface fa0/5 all you need to do is put a sniffer on there to see. It is also a good idea to have portfast turned off on your span destination and have it in a vlan that is not used ie. vlan 1.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco