[c-nsp] questions regarding RSPAN on Catalyst 2950, 3550, 3560, 3750 and 4500 platforms

[Martin T]

Saku,

thank you for reply! According to /var/log/messages and kernel ring
buffer, eth0 enters to promiscuous mode:

Oct  2 02:55:39 PE860 kernel: [7745928.328025] device eth0 entered
promiscuous mode
Oct  2 02:55:43 PE860 kernel: [7745931.459236] device eth0 left promiscuous mode


In addition, if I clear counters on "WS-C3560G-24TS" port Gi0/11 and
wait few seconds I can see see that "packets output" counter of port
Gi0/11(line protocol is down (monitoring)) increased by 11 packets and
at the same time I received 11 IPv6 packets(dhcp6 solicit, ICMP6
router advertisement, ICMP6 neighbor solicitation) in "PE860".
"ifconfig eth0" in "PE860" confirmed, that indeed only 11 "RX packets"
were received. With few seconds I should see dozens of packets
captured because VLAN 694 has >1Mbps traffic.

Any other ideas?


thanks,
Martin


2012/10/2 Saku Ytti <saku at ytti.fi>:
> On (2012-10-02 03:02 +0300), Martin T wrote:
>
>> 1) First setup: http://i.imgur.com/XFCD8.png
>> traffic captured in "PE860" machine- only STP frames show up. VLAN 15
>
>> 2) Second setup: http://i.imgur.com/a3KjV.png
>> "PE860" sees only IPv6 traffic! Am I doing something wrong or is this
>
> My first guess is PE860 is not in promiscuous mode and will only see
> broadcast/multicast.
> Do the switch counters agree that production traffic is not sent out?
>
> --
>   ++ytti
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/