We help IT Professionals succeed at work.

Cisco Monitoring Problem

644 Views
Last Modified: 2012-06-21
Hey here what i need to do :)

I have Cisco Catalist 2950 and i have more then 200 PC's i have one SERVER special added in the switch just to Monitor all trafic which is send to my PIX which is added in the switch in.
i use Ethernal for monitoring

when i set monitor on my switch and add the command :
monitor session 1 source interface gigabit0/1
monitor session 1 destination interface fa0/24

My server is getting DAMN CRAZY dosent move and its :

IBM-XSERIES_364
Intel(R) Xnenon(TM) 3.60GHZ
with 3Giga RAM

i really dont understande why my Server crashes
Comment
Watch Question

Commented:
What is connected to your gigabit 0/1 interface - if it's an uplink to another switch, that's not the interface you'd want to select.  I've done this before, using wireshark (ethereal's current iteration), by mirroring the switchport that the pix is connected to to the switchport the wireshark monitoring server is connected to.  Also, configure ethereal/wireshark to monitor traffic with the destination ip of your pix, so you aren't picking up all the broadcast crap traffic.

Author

Commented:
So i have just one switch and all goes inside in.

So my pix is on my 11-port and my BACKUPserver is on 16

i fxided up the swhitch with the connamd up and all just ins getting on my Server i dont have even time to set up anything the damn server just BLOCKS.

what do you think ?

regards, Igor

Commented:
I don't quite understand what you're saying in your last post.
It sounds like you're saying this 'backupserver' is on a different switch (16-port) than the pix (11-port), but you start by saying 'So I have just one switch....'.  Is it 1 switch with vlans - is that what you mean?

Author

Commented:
i have Switch Cisco Catalyst 2950

I have the PIX on the other side which is connected to this PIX and its on port 11.
all other subnetworks are connected to this mail Switch i had one more free port on this switch and i added an special server there just so i monitor all traffic on port 11

there i think you can understande me now.
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION
Forced accept.

Computer101
EE Admin
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.