SPAN not working?

Answered Question
Feb 25th, 2010

I have 6509 using sup 720's and Version 12.2(17r)SX5. I configured a SPAN but I'm not getting any packets on the monitor port. It seems pretty straight forward but it's not working and I'm not sure why. I'd appreciate any suggestions here.


The configuration is as follows:

monitor session 1 source interface Gi7/34
monitor session 1 destination interface Gi7/10

Here's the show mon:

LHH-MDF-CS01#sho mon
Session 1
---------
Type                       : Local Session
Source Ports           :
   Both                    : Gi7/34
Destination Ports     : Gi7/10

Egress SPAN Replication State:
Operational mode       : Centralized
Configured mode        : Centralized (default)

Here's a show int from g7/10:

GigabitEthernet7/10 is up, line protocol is down (monitoring)
Hardware is C6k 1000Mb 802.3, address is 0024.c403.3d99 (bia 0024.c403.3d99)
Description: jack h124 -> ESX3 VMNIC4
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
    reliability 195/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is 10/100/1000BaseT
input flow-control is off, output flow-control is on
Clock mode is auto
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output 03:01:51, output hang never
Last clearing of "show interface" counters 03:01:08
Input queue: 0/2000/1/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
    1 packets input, 64 bytes, 0 no buffer
    Received 1 broadcasts (0 multicasts)
    0 runts, 0 giants, 0 throttles
    1 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
    0 watchdog, 0 multicast, 0 pause input

    0 input packets with dribble condition detected
    0 packets output, 0 bytes, 0 underruns
    0 output errors, 0 collisions, 0 interface resets
    0 babbles, 0 late collision, 0 deferred
    0 lost carrier, 0 no carrier, 0 PAUSE output
    0 output buffer failures, 0 output buffers swapped out

Here's the source port sho int:

GigabitEthernet7/34 is up, line protocol is up (connected)
Hardware is C6k 1000Mb 802.3, address is 0024.c403.3db1 (bia 0024.c403.3db1)
Description: <<PRIMARY >>
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
    reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is 10/100/1000BaseT
input flow-control is off, output flow-control is on
Clock mode is auto
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output 00:00:09, output hang never
Last clearing of "show interface" counters 03:05:28
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 3550000 bits/sec, 463 packets/sec
5 minute output rate 1702000 bits/sec, 529 packets/sec
    14155653 packets input, 16036467333 bytes, 0 no buffer
    Received 30430 broadcasts (29700 multicasts)
    0 runts, 0 giants, 0 throttles
    0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
    0 watchdog, 0 multicast, 0 pause input

    0 input packets with dribble condition detected
    12331647 packets output, 6184049611 bytes, 0 underruns
    0 output errors, 0 collisions, 0 interface resets
    0 babbles, 0 late collision, 0 deferred
    0 lost carrier, 0 no carrier, 0 PAUSE output
    0 output buffer failures, 0 output buffers swapped out

Thanks

I have this problem too.
0 votes
Correct Answer by tdistlists about 6 years 9 months ago

Does look like you got it right.

Just a shot in the dark, but what does "show run int g7/10" look like? Try defaulting the interface, and just making it a switchport.

I don't have any switches running 12.2(17) anymore -- I know there were some SPAN fixes along the way, but I don't remember any specifics.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
tdistlists Thu, 02/25/2010 - 18:24

Does look like you got it right.

Just a shot in the dark, but what does "show run int g7/10" look like? Try defaulting the interface, and just making it a switchport.

I don't have any switches running 12.2(17) anymore -- I know there were some SPAN fixes along the way, but I don't remember any specifics.

rshum Thu, 02/25/2010 - 18:41

This is the config:

interface GigabitEthernet7/10
description jack h124 -> ESX3 VMNIC4
switchport
switchport access vlan 200
speed 1000
duplex full
spanning-tree portfast edge
spanning-tree bpdufilter enable
spanning-tree bpduguard enable

I reset it to the default and put this back and now it works....weird. Thanks for the suggestion.

Actions

This Discussion