07-13-2012 03:13 AM - edited 03-07-2019 07:45 AM
Hi All,
I have a need to capture some traffic but my core 6513's are already using the limit of 2 span sessions. I can't edit any of the sessions either because I want to source traffic from vlans and you can only do one or the other.
Is using a VACL with 'switchport capture' on the destination interface an option ?
E.g. I want to source traffic from vlan 10,20,30,40 and send the all to interface Gi10/10 ?? Anybody used something like this before and is there any caveats ? I dont need to be too granular with the ACL's but just capture all traffic in those vlans.
Appreciate the help!
07-13-2012 06:45 AM
fhoban@gmail.com wrote:
Hi All,
I have a need to capture some traffic but my core 6513's are already using the limit of 2 span sessions. I can't edit any of the sessions either because I want to source traffic from vlans and you can only do one or the other.
Is using a VACL with 'switchport capture' on the destination interface an option ?
E.g. I want to source traffic from vlan 10,20,30,40 and send the all to interface Gi10/10 ?? Anybody used something like this before and is there any caveats ? I dont need to be too granular with the ACL's but just capture all traffic in those vlans.
Appreciate the help!
Hello ,
2 full span sessions (Rx & Tx) are indeed the limit in 6500 series switch. Check out the below link for more information
Hope to Help !!
Ganesh
rate if it helps
07-13-2012 07:33 AM
Thanks Ganesh for the link. However I'm looking for a solution around this issue if possible.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide