- Green, 3000 points or more
This is going to sound like a dumb question, 'cos I should know this.
When you do an RSPAN (on a 4500), and you source from a VLAN, do you see each packet twice ... once as it enters and once as it exits the switch? That's what I seem to be seeing. Each and every packet appears on the trace twice, seperated by 10 to 20 microseconds.
Furthermore, for packets that I am re-marking DSCP on ingress, I see both versions, once as received from the host, and once after re-marking. Is that normal?
I have checked that I only have one source for the monitor session. If I "no" the "monitor session source" command, the trace stops, so I don't think I am monitoring more than one point.