I want to make sure that I am doing this right. I want to setup my Cisco Catalyst 3750 to span my default VLAN1. I have a server with two NIC's and believe this is the way I should set it up, let me know if I am wrong:
1) On one NIC attach to a port that is on a separate VLAN from the port I want to monitor. This NIC will only be used to listen to traffic from the switch. It will be attached to port Gi1/0/1
2) On my other NIC I will leave it attached to the network. It will be attached to port Fa2/0/1
3) I will enter the following command into my Cisco switch in config mode:
monitor session 1 source vlan 1 both
monitor session 1 destination interface fa2/0/1
I am going to use Ethereal to view network traffic. The link to the resource I am using is http://www.cisco.com/en/US/products/hw/switches/ps5023/products_configuration_guide_chapter09186a00801cdee2.html
Thanks in advance.