Cisco 2960 switch and Websense server

Hi there,
On my cisco 2960 I am monitoring all traffic from port 48 to port 47 by offering the following command.
monitor session 1 source interface Gi0/48
monitor session 1 destination interface Gi0/47
My websense server has 2 NICS, one on port 47 which has no ip and just checks the traffic from port 48.  The other NIC on websense server has an IP 10.10.10.31 which goes into port 6.  Everything works well except when all the users are online then the traffic goes really slow.
Question:
-Is there anything else needed more in commands for monitoring traffic to make them specific for only internet traffic?  How and what is required?
-Should the websense server only check the http traffic on port 47 of switch 2960?  How
Help plz.
LVL 5
amanzoorNetwork infrastructure AdminAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
blaslettConnect With a Mentor Commented:
WireShark is a free software tool that will do this for you. I have used it on many occasions with great success.

It allows you to set protocol fiters such as HTTP, FTP, whatever you want.

You can download it at :

http://www.wireshark.org/download.html

0
 
Istvan KalmarConnect With a Mentor Head of IT Security Division Commented:
HI,

I advise to mirror only the firewall internal leg, if you do it you only see the intenetnet traffic!
0
 
amanzoorNetwork infrastructure AdminAuthor Commented:
ikalmar:
Please let me know how to do that in steps.  What commands to put in?
Help plz
Thanks
0
 
Istvan KalmarHead of IT Security Division Commented:
Should be:

monitor session 1 source interface fa0/1  <--the interface you want to capture traffic on
monitor session 1 destination interface fa0/2  <--the interface you want to send the captured traffic to
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.