Span Port sending way more data to destination

[Alex-Pr]

Hey There,

I get there is duplication of data but I can't figure the math on this one and what is happening.  Please help.

I am trying to copy a Port-Channel of 4*1 gbps interfaces to a single 10gbps interface

monitor session 1 source interface Po100
monitor session 1 destination interface Te1/5/1

This is on a 6807xl with Sup6T supervisor engine in VSS

The port channel 100 has the following average

5 minute input rate 139350000 bits/sec, 16264 packets/sec
5 minute output rate 50563000 bits/sec, 9477 packets/sec

So just shy of 200 Mbps when looking both ways

The span destination 

30 second input rate 0 bits/sec, 0 packets/sec
30 second output rate 3730076000 bits/sec, 368991 packets/sec

3.7Gbps....

That is 19 times more data on the destination then the copied traffic...

What is happening and how can get the span session to work so the total is closer in line to match the source data...

Thanks

A.

[balaji.bandi]

check this thread may give some hint :

https://community.cisco.com/t5/switching/what-is-best-practice-for-local-span-on-cat-6800-vss-w-mec/td-p/4193013

can you post what interfaces in PO100

[Cristian Matei]

Hi,

   Can you do the following:

1. configure "load-interval 30" on both monitor sessions source and destination interfaces, meaning Po100 and Te1/5/1

2. clear all interface counters via "clear counters"

3. Run "show interfaces po100" and "show interfaces Te1/5/1", each 30 seconds, for 6 times in a row, paste the complete output so we can look at it

Thanks,

Cristian.

[paul driver]

Hello
Have you tried setting the span session to only capture source or destination and not both- also possibly apply a vlan filter to specify only certain traffic