cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
792
Views
0
Helpful
1
Replies

6500 monitor session and packets drops

abdsamad13
Level 1
Level 1

Hi,

I have a problem with a "monitor session" (sniffer) on a 6509.

When it's active, a lot of packets drops appears and the monitored vlan become unavailable.

I use a remote span vlan  and I have tried two configurations:

  • vlan span: monitor session source vlan X
  • vacl span with a "permit ip any any".

The drops can appears on multiple 6500 switchs who knows the remote span vlan.

If I filter the traffic to capture (ie only http and ftp flow), it's ok but I need to take all IP traffic.

If anyone already meet this problem or have any tips.

Many thanks for your help.

Best regards

1 Reply 1

mcusine
Level 1
Level 1

Hi Abdessamad,

What bandwitch do you have in the destination interface?. Some times the destionation interface don't have enought bandwitch for support all vlan or all interfaces traffic, maybe for these reason you see drops.

Regards,

Mauricio

Review Cisco Networking for a $25 gift card