cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
373
Views
0
Helpful
1
Replies

Need to know how to "write" on a catalyst 4006 port using port mirroring

sguerrero
Level 1
Level 1

I am connecting a Real secure IDS in a catalyst 4006 with WS-C4006 Software, Version NmpSW: 6.3(1).

What I need is to enable span or port mirroring in my catalyst but with the ability of wrtiting on the port, because one of the funcionalities of this IDS is to detect private signatures (signatures created specifically for a TCP or UDP port) and write on the port the IDS is connected to in order to block the connections considered as attacks.

I already enabled span with set span commands, but still don´t get results I want because it seems we are not able to write on the port, Could you please let me know if this is possible or what commands shall I use?

Thanks for any help!

1 Reply 1

Prashanth Krishnappa
Cisco Employee
Cisco Employee

I think what you are looking for is the "inpkts" feature of SPAN

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat4000/rel6_3/config/span.htm#1022939

Review Cisco Networking for a $25 gift card