Span Configuration

[wasiimcisco]

I have configure my 3750 switch for span. In this switch my IPS 4255, Internet router and Pix firewall is connected.

Below mention is the span configuration

monitor session 1 source interface Gi1/0/1 - 3

monitor session 1 destination interface Gi1/0/5

now the problem is the that IPS capturing traffic twice once while going out and once while coming in.

I wana know how to configure monitor session that it only capture traffic that is coming from Internet. Not traffic that

is originating from inside of the network.

In switch port 1 Internet router is connected, port 2 is for firewall and three is for concentrator.

I m confuse about the span port configuration either Rx or Tx. Right it is both Rx and Tx.

[rhermes]

You can specify the direction you want to captire traffic in your "monitor session" command. The default is both Receive and Transmit. Thy this version of your command:

monitor session 1 source interface Gi1/0/1 - 3 r