i have an expert problem:
on a 7600 there is an IDSM2 blade. On two gigabit ports from the 7600, configured as L3 ports (no switchport) there are ip addreses configured and there is OSPF runnig with 2 other equipents.
The sniffing is configured with span on the two GIgabit ports.
The problem is that when the ospf equipments send the multicast traffic to 22.214.171.124 not all these packets arrive to the IDSM thus triggering the following two signatures:
- IP Fragment Missing Initial Fragment id=1204;
- description=IP Fragment Incomplete Datagram id=1208;
There is no missing packets on the OSPF protocol and no retransmission so the only problem that i see is that the SPAN does not send all the packets to the IDSM.
Sniffing with the VLAN filtering is not posible because those are Gigabit Interfaces and the VLAN filtering works only with vlans or with pos, atm or serial interfaces.
i attached the events from the IDSM.
If anyone has any ideea why this is happenig please tell me. I don't need an workaround but a reason.
Thanks in advanced.