cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
257
Views
0
Helpful
1
Replies

SPAN monitoring server NIC team

axa-wongjeff
Level 1
Level 1

Our NT servers are configured with team NIC. Therefore, 1 NIC goes to switch01 and the other to switch02 with both ports on the same VLAN. A question came up to me on how would we perform a traffic capture if a troubleshooting step required it.

I was thinking of SPAN each respective server switch port and run a cable from the monitor port to a spare simple switch. Then SPAN the 2 ports to a port connected to the packet analyzer.

Anyone care to share how they set theirs up or other alternatives? Thanks.

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

If feasible, think about running a capture agent (pcap, ethereal etc.) on the server itself.