mirroring trunk port - need to find whats hogging the bandwidth

[carl_townshend]

Hi all

I need to find out what is killing my ethernet wan circuit urgently, It is a ethernet trunk port with vlans tagged across it.

its a 3560x switch.

I configured span with the replicate keyword, but im not seeing all the traffic im sure.

Im using wireshark.

Is there anything I can do to find what is causing this?

I really need to sort this guys

cheers

Carl

[johnlloyd_13]

hi carl,

could you post your 'show monitor' output?

[Leo Laohoo]

Try this:

config t

ip flow-top-talkers

top 10

sort-by bytes

cache-timeout 60000

end

Wait 5 minutes and try the command:  sh ip flow top