What do you see in the output of this command ?

show monitor session 1

Unfortunately when I got to be told about the problem the customer had done - no monitor session 1 by then.

But customer says - When he had the monitor session 1 commands he had the following output:

sh mon sess 1

Session 1

---------

Type : Local Session

Source Ports : Fa0/6

Destination Ports : Fa0/12

Encapsulation : Native

I asked him if he had seen anything like Ingress or Egress disabled and he says he does seem to recall seeing that.

We will try again to see what the output of show monitor session 1 command is after tunrining on monitoring.

I tried to simulate this problem in our lab and I configured as follows and show monitor shows as follows. Why does it show ingress disabled.

arvproctors01#show run | begin monitor

monitor session 1 source interface Fa0/6

monitor session 1 destination interface Fa0/12

!

end

arvproctors01#sho mon

Session 1

---------

Type : Local Session

Source Ports :

Both : Fa0/6

Destination Ports : Fa0/12

Encapsulation : Native

Ingress : Disabled

arvproctors01#

Ingress is disabled by default however, do not get confused with t he traffic being monitored. It means that port fa 0/12 will not work as a regular port therefore won't receive packets, it is only monitoring. If you want to monitor traffic and use that port to receive regular traffic then you should used:

monitor session 1 destination interface fastethernet0/12 ingress vlan X

Gary