cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1370
Views
0
Helpful
2
Replies

Span with encapsulation replicate (3750 2970)

jeancello
Level 1
Level 1

I'm trying to sniff trunk port with the monitor session command with the encapsulation replicate option.

If i do a show interface on the destination port, i see trafic but none is forwarded to my sniffer. (Only the broadcast)

If i do it without the "encapsulation replicate" option, it works fine. (But i don't see the 802.1Q info)

The switches runs on the 12.1(19)EA1a version.

Is it a bug?

Thanks for helping!

2 Replies 2

skarundi
Level 4
Level 4

not heard of any bug with the "encapsulate replicate" option.

the sniffer you are using may not support the capture of tagged packets.

have you tested the capability of the sniffer to capture tagged packets on other switches that support the feature. ( e.g cat6k, cat4k ? )

I have snifer pro latest version and i use it a lot,

It works with 2924 and 2950 and 4506.

Thanks