C9300 - App-Hosting with RSPAN VLAN + Mirror Interface

[lauresfrank]

Hi,

I use Cat9300 with App-Hosting Wireshark in conjunction with RSPAN VLANs as capture destination.

!
app-hosting appid c9kwireshark
 app-vnic AppGigabitEthernet trunk
  vlan 999 guest-interface 1
   mirroring
  vlan 101 guest-interface 0
   guest-ipaddress 10.1.1.9 netmask 255.255.255.0
 app-default-gateway 10.1.1.3 guest-interface 0
 app-resource docker
 app-resource profile custom
  cpu 7400
  memory 2048
  persist-disk 1024
  vcpu 2
!
vlan 999
remote-span
!
interface AppGigabitEthernet1/0/1
switchport mode trunk
switchport trunk allowed vlan 101,999
!
monitor session 1 source interface Po1 
monitor session 1 destination remote vlan 999
!

Unfortunately I cannot see any traffic on guest-interface1 coming from PO1 redirfected into vlan999. Can anyone explain why or what the missing piece is? Is RSPAN supported by App-Hosting Bridge or anything to consider?

Thank you.

[orp]

I'm having now the same issue. Were you able to solve it? Or otherwise to understand what's exactly the problem? Thanks

[orp]

Thanks to support from Cisco we were able to solve the issue.

The .tar has to be created with the ioxclient app, and must include the "mirroring" capability in the .yaml file. The switch configuration alone is not enough. Actually the Wireshark demo doesn't really work as is shown.

[ahamzagic1]

Can you please share your package.yaml file? I cannot seem to figure out the mirroring syntax for my data interface.

[orp]

Yes, definitely. Should have posted it in the first place. Many answers in this forum are of the type "managed to solve with Cisco" without too much description, then what's the point 🤷‍

descriptor-schema-version: "2.12"
info:
  name: my_docker
  description: what my docker does.
  version: latest
app:
  cpuarch: x86_64
  env:
    PATH: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
  resources:
    profile: custom
    cpu: "7400"
    memory: "2048"
    disk: "40000"
    network:
    - interface-name: management_1
    - interface-name: span_1
      mirroring: yes
  startup:
    rootfs: rootfs.tar
    runtime_options:
      --mount type=tmpfs,destination=/tmp/my_scratch,tmpfs-size=100M
    target:
    - python3
    - /usr/bin/launcher.py
  type: docker