[c-nsp] SPAN - 6509 Switch

[Jon Lewis]

On Thu, 17 Mar 2005, Paul Stewart wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Basically I want to sniff all the traffic going through that VLAN
> inbound/outbound.  When I do sniff I only seem to stp and vtp traffic..
> a little arp but that's it..

I haven't tried this, but perhaps vlan acl with forward capture would work
better?

http://cio.cisco.com/en/US/products/hw/switches/ps708/products_configuration_guide_chapter09186a0080160a7e.html#wp1089072

The plus side is, once you start getting an idea of what's going on, you
can selectively capture traffic and not have to send everything to the
montior/capture port.

----------------------------------------------------------------------
 Jon Lewis                   |  I route
 Senior Network Engineer     |  therefore you are
 Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________