On my cisco 2960 I am monitoring all traffic from port 48 to port 47 by offering the following command.
monitor session 1 source interface Gi0/48
monitor session 1 destination interface Gi0/47
My websense server has 2 NICS, one on port 47 which has no ip and just checks the traffic from port 48. The other NIC on websense server has an IP 10.10.10.31 which goes into port 6. Everything works well except when all the users are online then the traffic goes really slow.
-Is there anything else needed more in commands for monitoring traffic to make them specific for only internet traffic? How and what is required?
-Should the websense server only check the http traffic on port 47 of switch 2960? How