Span Switch

Unanswered Question
Oct 13th, 2009
User Badges:

Hi All,

I would like to inquire if ever i put a pc w/ a wireshark member of a vlan for ex. vlan 200,then i run the wireshark is it normal that i see the traffic of other pc even they are on another switch but still member of vlan 200? Appreciate all of your response!



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Beat.Traber Tue, 10/13/2009 - 21:57
User Badges:


it is normal for a span session that you see broadcasts, multicasts, unknown unicasts of the same vlan, but you should not see other traffic


Mhon Baul Tue, 10/13/2009 - 22:37
User Badges:

hi beat,

thanks for your response. i havent configured span on the switch, i just run the wireshark and seen the traffic of the two host that were in the same vlan but different switch.

ravikumar.basav... Tue, 10/13/2009 - 22:34
User Badges:

Span is used to see traffic on that switch along with other broadcasts and unicast, however if you want to see the traffic on the same vlan, but different swtiches, you need to use Rspan.

Mhon Baul Tue, 10/13/2009 - 22:42
User Badges:

yes you are right, but i want to clarify if it is possible to see traffic of two host on the same vlan but different switch even i did'nt configure span on the switch. i just run the wireshark on the pc.




This Discussion