Using RSPAN with a computer connected to a TRUK port

Unanswered Question
May 20th, 2008


I want to sniff the traffic from a computer connected to a remote switch.

The sniffer is installed on a computer connected to a TRUNK port with several sub-interfaces for each VLAN.

I want to direct the traffic to one of the sub-interfaces.

I tried using the "ingress" command and "learning" but the computer stopped working each time.

Remote source switch:

monitor session 3 source interface Gi7/1

monitor session 3 destination remote vlan 555

Destination switch:

1. the computer port configuration:

switchport access vlan 20

switchport trunk encapsulation dot1q

switchport trunk native vlan 20

switchport mode trunk

logging event link-status

no snmp trap link-status

spanning-tree portfast

2.monitor session config:

monitor session 1 source vlan 555

monitor session 1 destination interface Gi10/22 ingress vlan 20 learning

Thanks in advanced for the help!!


I dont mind that the of the sub-interface destination port will only sniff the traffic.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
naorelkayam Tue, 05/20/2008 - 22:03

Please, I can not add another NIC to my computer, so I need to see the traffic on one of my virtual interfaces.

Can someone at least shade some more light on the subject (like the"ingress" and "learning" options)



This Discussion