I am trying to do local SPAN of one of my switch port which is my Application Server. When I configured SPAN it is only showing one directional traffic on Wireshark while "show monitor sess" clearly showing that it is monitoring "Both" directions. I have tried using "tx" and "rx" separately but unable to get "Tx" traffic from that Port.
Now I am having one 6500 which is directly connected with my 4500 and this Chassis contains a NAM Module. When I tried configuring Remote SPAN instead Local SPAN of the same port (On 4500) I am able to see required captures which is showing both directional traffic which is coming from and going towards the server on (4500 Port 1/24).
Can anyone confirm what can be the possible issue ? I am pasting the Port Configuration along with SPAN Config.
Switch: WS-4507R-E, IOS:12.2 54 SG1
Application Server: Gig1/24
Capture Port (Where Wireshark is Running): Gig1/11
interface GigabitEthernet1/11
description **** Connected to my Laptop****
switchport mode access
load-interval 30
no cdp enable
spanning-tree portfast
!
interface GigabitEthernet1/24
description **** Connected to Application Server****
switchport access vlan 225
switchport mode access
switchport port-security maximum 3
switchport port-security violation restrict
speed 1000
duplex full
storm-control broadcast level 1.00
storm-control action trap
no cdp enable
spanning-tree portfast
!
monitor session 10 source interface Gi1/24
monitor session 10 destination interface Gi1/11
