[c-nsp] Question about SPAN session

[Lindahl, Carl]

Nothing went wrong, that is how that IOS handles span. It is a true
Monitor only port, no transmission with the rest of the network. Add a
2nd NIC in the linux box for communication w/ it and have a dedicated
monitor or probe NIC.



Carl

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net]On Behalf Of Hugo Rebello
Sent: Monday, March 14, 2005 11:04 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] Question about SPAN session


Guys,

I have a doubt about SPAN session using "monitor session" command in 
Cisco switches.
I want to monitor my E-mail Server via sniffer (Ntop in Linux), and I 
have a Cisco Catalyst 2950 switch.
So, When I insert the commands below in the switch, my sniffer server 
stop the communication with the others machines.

monitor session 1 source interface fa 0/16 (E-mail Server is connected
here)
monitor session 1 destination interface fa 0/38 (Sniffer Server is 
connected here)

Why is it happened ?
I don't know what is wrong.

Thank you.

Cheers,
Hugo

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/