I would like to use the cisco switch such as a hub.
I had already configutation the next lines:
monitor session 1 source interface gigabitEthernet 0/3 tx
monitor session 1 destination interface gigabitEthernet 0/17
Before I login to server (it is gigabitEthernet 0/17) and I ran tcp dump.
I had to delete 'monitor session 1 destination interface gigabitEthernet 0/17' because the server was very slow.
Thank you for the help to everybody.
All traffic transmitted out of g0/3 will be mirrored to g0/17 thus if it is a lot of traffic, the server will have to be able to capture all this traffic and processed internally. If the server was slow, I recommend checking the CPU stat on the server and determine what was causing the slowness - perhaps the tcp dump..
I recommend using a packet analyzer instead of tcp dump. You can get WireShark for free.
Also, be aware - the server won't be able to send any traffic out of g0/17 as the port is set to 'monitor'. If the server is trying to access resources during a login or after login, it may be perceived as being slow but the problem is the server is unable to connect to any resources in the network.
This is normal behavior and you must make sure the monitoring station does not need to access any devices in the network (printers, map drives, etc).