cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
666
Views
0
Helpful
2
Replies

cisco switch as a hub

bozsikjanos
Level 1
Level 1

Hy,

I would like to use the cisco switch such as a hub.

I had already configutation the next lines:

monitor session 1 source interface gigabitEthernet 0/3 tx

monitor session 1 destination interface gigabitEthernet 0/17

Before I login to server (it is gigabitEthernet 0/17) and I ran tcp dump.

I had to delete 'monitor session 1 destination interface gigabitEthernet 0/17' because the server was very slow.

Thank you for the help to everybody.

1 Accepted Solution

Accepted Solutions

Edison Ortiz
Hall of Fame
Hall of Fame

All traffic transmitted out of g0/3 will be mirrored to g0/17 thus if it is a lot of traffic, the server will have to be able to capture all this traffic and processed internally. If the server was slow, I recommend checking the CPU stat on the server and determine what was causing the slowness - perhaps the tcp dump..

I recommend using a packet analyzer instead of tcp dump. You can get WireShark for free.

Also, be aware - the server won't be able to send any traffic out of g0/17 as the port is set to 'monitor'. If the server is trying to access resources during a login or after login, it may be perceived as being slow but the problem is the server is unable to connect to any resources in the network.

This is normal behavior and you must make sure the monitoring station does not need to access any devices in the network (printers, map drives, etc).

Regards

Edison.

View solution in original post

2 Replies 2

Edison Ortiz
Hall of Fame
Hall of Fame

All traffic transmitted out of g0/3 will be mirrored to g0/17 thus if it is a lot of traffic, the server will have to be able to capture all this traffic and processed internally. If the server was slow, I recommend checking the CPU stat on the server and determine what was causing the slowness - perhaps the tcp dump..

I recommend using a packet analyzer instead of tcp dump. You can get WireShark for free.

Also, be aware - the server won't be able to send any traffic out of g0/17 as the port is set to 'monitor'. If the server is trying to access resources during a login or after login, it may be perceived as being slow but the problem is the server is unable to connect to any resources in the network.

This is normal behavior and you must make sure the monitoring station does not need to access any devices in the network (printers, map drives, etc).

Regards

Edison.

Edison,

Thank you for your help.

I could find that what was the trouble. I dont know that the 'monitor session 1 destination ….' command is stop the line protocol on interface. I know it by now.

I will use two network card in server and I still monitor the traffic on either port of switch and I will connect the server on other port. Then I will can run tcpdump or other packet sniffer.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: