08-29-2003 12:02 PM - edited 03-02-2019 09:59 AM
I've set up SPAN on my Cisco 2950 Switch to analyze network traffic. I've mirrored all traffic going to the switch source (FastEthernet 0/1) to destination
(FastEthernet 0/13)
The problem is that the sniffer I have on FastEthernet 0/13 needs to have the ability to email out. Plus, I need the ability to remote access into the server behind FastEthernet0/13 to manage the sniffer program.
How can this be done? Am I using the correct feature (SPAN)?
Much thanks,
Anson
(docs I was refering to)
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2950/12114ea1/2950scg/swspan.htm
08-29-2003 02:10 PM
From the document you pointed to...
"
The port does not transmit any traffic except that required for the SPAN session."
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2950/12114ea1/2950scg/swspan.htm#1036749
08-29-2003 03:56 PM
Is there any other way to set the switch so that it will allow me to have the server to have remote access ability?
08-29-2003 06:13 PM
Not with current IOS versions. It is hoped that this will be fixed in the future.
In the meantime, you can add a second NIC to the machine, transfer the IP address to it (the sniffing interface doesn't need one), and attach it to a normal switch port.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide