I'm monitoring a switch port with a span session (only one session in the switch) because of a VoIP system issue we are having. Basically there is a loss of connectivity between servers and the PBX:

csta-atl-1.0\csta-atl-1.0.exe.7940(SMAlarm_LinkLost): Error[456] -> Telephony gateway acs_lindorff lost CTI link (Primary).

I see no physical disconnect on the port at the time of the incident. I also got a monitor ping going to that PBX server every 30 sec.... don't see any problem there either. I am running dumpcap.exe on a separate server collecting packets continuously.  The IP of the server that I am monitoring is 10.10.207.31.  The only thing strange that I've found is traffic between two different IPs on that port right about the same time as the above error message. (and this ain't no hub!:

5101681      2323.813316000      10.10.207.33      10.10.207.42      TCP      60      [TCP Keep-Alive] microsoft-ds > capioverlan [ACK] Seq=1 Ack=1 Win=64691 Len=1

5100574      2321.829030000      10.10.207.33      10.10.207.42      TCP      60      [TCP Keep-Alive] microsoft-ds > capioverlan [ACK] Seq=1 Ack=1 Win=64691 Len=1

5090267      2304.316582000      10.10.207.33      10.10.206.46      TCP      96      27911 > ff-sm [PSH, ACK] Seq=1 Ack=1 Win=64877 Len=42