Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

2801 SPAN port

Hi,

I have to sniff the traffic from the outside interface of a remote-site router, 2801. The router has only 2 Fa ports, and they are currently occupied: one for connecting to the service provide and the other, connecting to the office LAN.

In the documentation, I've read that SPAN can be configured on 2800 only if ethernet switch module is installed.

How could I sniff the traffic on the fa0/1 (to service provider) interface with Ethereal? Is it possible at all?

Regards,

Mladen

1 ACCEPTED SOLUTION

Accepted Solutions

Re: 2801 SPAN port

You would have to place a HUB between fa0/1 and the connection to the ISP.

HTH and please rate.

3 REPLIES

Re: 2801 SPAN port

You would have to place a HUB between fa0/1 and the connection to the ISP.

HTH and please rate.

New Member

Re: 2801 SPAN port

It is quite diffucult to find a hub theese days...

I considered this option, but as a last resort solution :).

Thanks,

Mladen

Re: 2801 SPAN port

You could try a debug and dump it out to SYSLOG but thats pretty dangerous. Hubs are readily available, but usually only with 10MB. You could also look at using a network TAP.

http://www.netoptics.com/products/product_family_details.asp?cid=1&pid=159&Section=products&menuitem=&tag=NetOptics+Network+Taps

HTH and please rate.

375
Views
0
Helpful
3
Replies