Monitor Ports

From: Ernst Pelser (e.pelser@infosecureltd.com)
Date: Sat Nov 17 2007 - 13:50:34 ART


Hi
I have a question about monitoring ports (monitor session). I'm doing the
SPAN section where you have routers 1 and 2 connecting to switch 1 on port
f0/1 and f0/2 respectively. Then R6 connects to f0/6. The monitor session is
set up to with the source being VLAN12 which both R1 and R2 are part of. The
destination is F0/6 on SW (R6).
 
To verify we enable debugging on R6. Then we ping 255.255.255.255 from R1
and see traffic on R6. No problem there.
 
The question I have is, why don't you see traffic on R6 when you ping to
R2's IP from R1? Surely R6 should see that traffic as well?
 
Thanks, EP



This archive was generated by hypermail 2.1.4 : Sat Dec 01 2007 - 06:37:30 ART