I'm currently looking at a few different network monitoring products.
I have been reading through info from Network Instruments hardware probe products.
In order to test the product it says i will have to enable a span port on the switch and then i will be able to see data passing back and forth.
Im looking at this doc and trying to figure out how to do this but im getting confused.
http://www.cisco.com/warp/
Can someone please explain?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
To quote you a piece of another cisco document:
Local SPAN and RSPAN Sessions
SPAN sessions (local or remote) allow you to monitor traffic on one or more ports, or one or more VLANs, and send the monitored traffic to one or more destination ports.
A local SPAN session is an association of a set of source ports and source VLANs with one or more destination ports. You configure a local SPAN session on a single network device. Local SPAN does not have separate source and destination sessions.
RSPAN consists of an RSPAN source session, an RSPAN VLAN, and an RSPAN destination session. You separately configure RSPAN source sessions and destination sessions on different network devices. To configure an RSPAN source session on one network device, you associate a set of source ports and VLANs with an RSPAN VLAN. To configure an RSPAN destination session on another device, you associate the destination port with the RSPAN VLAN.
You can read the full guide (very good one) here: http://www.cisco.com/en/US
On a 6509 with 12.3 IOS or lower you can only have 2 SPAN sessions on a switch. If you have a firewall services module or a NAM (investigate them too, they are Cisco's verison of packet monitoring) you can find that they take SPAN ports - particularly FWSMs as they take one without telling you for use to bodge multicast (it can be removed I believe)
I recently setup my 6509 to filter web traffic using 8e6 R3000, if you simply looking to capture all data on a span port. The command is:
set span mod/port mod/port both
the first mod/port points to the port you want to capture from the second is of course the port your sending captured data to. My exact command on switch is below:
set span 1/4 1/15 both
Business Accounts
Answer for Membership
by: favorettiPosted on 2008-02-21 at 06:22:10ID: 20947921
Port spanning provides you with the functionality of copying traffic from any port to any VLAN or other port of the switch. So whatever port your appliance is connected to should be the target port of the span.
Whatever ports you want to monitor - should be the sources of the span.