12-04-2007 12:41 PM - edited 03-05-2019 07:49 PM
Hi,
I read the folowing text.
I have a doubt.
When i make a SPAN, the statistics of show int are the same?
example:
type configuration on fa0/5 port:
fa0/1
fa0/5
port monitor 1
type:
clear counters
wait some for trafic in fa0/1
show int fa0/1
show int fa0/5
the output statistics of input and output packets, bytes, etc of int fa0/1 is the equal??
12-04-2007 01:58 PM
Hi,
Could you please give more details, which interface is the source of traffic and which destination?
Show counters may differ, whenever you are copying tx, rx or traffic in both directions.
Looking forward to hear from you.
Michal
12-04-2007 05:30 PM
Here is how I would set up your monitor session for sniffing a port.
monitor session 1 source interface Fa0/1
monitor session 1 destination interface fa0/5
That is assuming your sniffer is on port 0/5.
If you want to see if you are getting packets copied to inteface fa0/5 all you need to do is put a sniffer on there to see. It is also a good idea to have portfast turned off on your span destination and have it in a vlan that is not used ie. vlan 1.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: