I'm trying to set up a SPAN on a 802.1x port as the source. I'm trying to capture the 802.1x EAP conversation going back and forth and am only seeing one side of the conversation, from the host to the switch. I'm not seeing anything from the switch back to the host.
If I do a capture on the machine that is 802.1xing, I see both sides of the convo, host to switch and switch to host.
It was set up as follows:
monitor session 1 source interface fa1/0/44 both
monitor session 1 destination interface fa2/0/38
Anyone have any ideas?Everything I read on Cisco looks like 802.1x ports can be used as source ports.