Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

Sniffing problem with 802.1q on all frames in 2950 SPAN port

Hello,

I have four Cat 2950XL switches connected. One is VTP server and the other are clients. They are interconnected via gigabit or etherchannel trunks.

When I activate SPAN monitoring on a port, I am seeing the whole 802.1q frame instead of the ethernet packet. This is causing great problems for my IDS system that is trying to listen to the traffic on the SPAN port.

Is there any way to disable this "feature" and just forward the ethernetframe to the SPAN port??

Best regards Henrik

1 REPLY

Re: Sniffing problem with 802.1q on all frames in 2950 SPAN port

Since there has been no response to your post, it appears to be either too complex or too rare an issue for other forum members to assist you. If you don't get a suitable response to your post, you may wish to review our resources at the online Technical Assistance Center (http://www.cisco.com/tac) or speak with a TAC engineer. You can open a TAC case online at http://www.cisco.com/tac/caseopen

If anyone else in the forum has some advice, please reply to this thread.

Thank you for posting.

161
Views
0
Helpful
1
Replies
CreatePlease to create content