Link to home
Start Free TrialLog in
Avatar of dude02
dude02Flag for United States of America

asked on

Cisco Monitor Session - SPAN

I am trying to setup a Cisco monitor session. The source ports are g1/4 which is the inside interface for my Cisco ASA. The destination port G7/41 is on vlan 254. This is what I have so far.


interface GigabitEthernet1/4
 description ASA5515X-Primary-Inside
 switchport access vlan 256
 switchport mode access
 spanning-tree portfast


interface GigabitEthernet7/41
 description FP Network Agent
 switchport access vlan 254
 switchport mode access



monitor session 1 source interface Gi1/4
monitor session 1 destination interface Gi7/41
monitor session 1 filter packet-type good rx


For testing purpose I have a user going to an outside ftp site and I have Wireshark on G7/41 which shows no ftp activity. I am also not seeing any http or https activity. So I know I am missing something. Any assistance will be greatly apperciated.
ASKER CERTIFIED SOLUTION
Avatar of Svet Chinkov
Svet Chinkov

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Svet Chinkov
Svet Chinkov

Exactly what I suggested, except for testing purposes I asked him to use both. He can also setup a capture or display filter on Wireshark.

Thank You
Avatar of Pete Long
Just run a packet capture on the ASA?

P