Mirror traffic in Cisco Switch 3750

Dear Experts, I'm testing the SPAN feature in Switch Cisco 3750. This is the diagram:

SPAN.png
This is configuration on Core SW:

monitor session 1 source vlan 55 both
monitor session 1 destination interface g1/0/13

Open in new window


It seems like working but the whole vlan 18 was hang, so I could NOT access the PC which was installed wireshark. How can I fix it? Can we just mirror traffic from some IP addresses, not all VLAN?

Many thanks as always!
LVL 5
DP230Network AdministratorAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

atlas_shudderedSr. Network EngineerCommented:
Yes, you can source from multiple IP addresses by resolving IP address to MAC to interface and the SPANing the interfaces those hosts are connected to.
0
Craig BeckCommented:
When you say "I could NOT access the PC which was installed wireshark", were you trying to access the PC remotely?  If so, that won't work as the PC running Wireshark is connected to a port which just receives traffic.  The monitor destination interface can't be used as a normal port.

You can monitor specific ports if you want to, like this...

monitor session 1 source interface gi1/0/1
monitor session 1 destination interface gi1/0/13

Open in new window

0
Pete LongTechnical ConsultantCommented:
Agreed your confusing RSPAN and SPAN :)
0
DP230Network AdministratorAuthor Commented:
Hi Pete, refer to this diagram, can we achieve correct RSPAN when the physical destination interface (g1/0/13) is connected to ESXi host? not the physical PC

we would like to mirror traffic from VLAN 55 through VLAN200 to that VM server

SPAN.png

Update: Yes, I tested and it worked but again, cannot remote desktop to VM with that monitored interface
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.