SPAN (or RSPAN) you port of interest to one with a host running Wireshark (www.wireshark.org). Capture the traffic there and analyze it using that product. If you have an *nix host, grab the traffic using tcpdump and look at it raw or ftp the file to a host with wireshark - it can open tcpdump files.(Wireshark runs on *nix also.)
If you don't want to SPAN, you can use a splitter like a Gigamon to pull off optical traffic out of band.
Other options in include Sniffer / Remote Sniffer or Network Instruments' Observer.
Hi everyone, I would like to thank you in advance for any help you can provide a newcomer like myself!
Im studying the 100-105 book by Odom and am currently on the topic of Port security. I purchased a used 2960 and I'm trying to follow a...
While deploying a number of 18xx/2802/3802 model access points (APs), which run AP-COS as their operating platform. It can be observed on some occasions that while many of their access points were able to join the fabric WLC withou...
I am going to design and build an LAN network under a tunnel underground with long distance between the switches.
I will have 2 Catalyst switches and 8 Industrial IE3000, and they will be connected with fiber.
For now I am planning on use Layer-2 s...