SPAN:only recieved packets monitored

[admin_2]

We enabled span with

#set span 100 3/46 both

where vlan 100 includes ports 3/1-10 and 1/1-2, which are Gigabit-ethernet ports, dest port 3/46

belongs to vlan1.

I actually expect to be able to monitor all transmitted and recieved packets, but only transmitted packets of some ports are mirrored.

e.g we had a ping coming from one port, but couldn't

see the reply, although it was recieved by the pinging host. Any suggestions ?

HW is C6509 Ver.2, SW 6.1(1.d)

br Torsten Feistel

[amritpatek]

Guess, you have configured VSPAN to monitor the traffic on particular vlans. I suspect the problem here is with the ports on the administrative VLANS. Check this extract from the following document :

VLAN-based SPAN (VSPAN) is analysis of the network traffic in one or more VLANs. You can configure VSPAN as ingress SPAN, egress SPAN, or both. All the ports in the source VLANs become operational source ports for the VSPAN session. The destination port, if it belongs to any of the administrative source VLANs, is excluded from the operational source. If you add or remove ports from the administrative source VLANs, the operational sources are modified accordingly.

For more info, please refer to:

VSPAN

http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_guide_chapter09186a00801a5b33.html#1019879