cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
255
Views
0
Helpful
1
Replies

SPAN monitoring server NIC team

axa-wongjeff
Level 1
Level 1

Our NT servers are configured with team NIC. Therefore, 1 NIC goes to switch01 and the other to switch02 with both ports on the same VLAN. A question came up to me on how would we perform a traffic capture if a troubleshooting step required it.

I was thinking of SPAN each respective server switch port and run a cable from the monitor port to a spare simple switch. Then SPAN the 2 ports to a port connected to the packet analyzer.

Anyone care to share how they set theirs up or other alternatives? Thanks.

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

If feasible, think about running a capture agent (pcap, ethereal etc.) on the server itself.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: