01-17-2025 02:56 AM
Dear All,
I have tryed to setup a Session Monitor to try to capture the data traffic that camo from and to VMWARE Servers.
I set setup the monitor session on a WS-C2960L-48TQ-LL in this way:
monitor session 1 source interface Gi0/31 - 33 <----these ports are part of portchannell and are connected to VMWARE
monitor session 1 destination interface Gi0/48 <-----Here I ahve my PC with wireshark
In the wireshark I see only the broadcast traffic, do you know why?
The Portchannell is configured in this way:
interface Port-channel3
description ITTUR-ESX01 4Gb
switchport trunk native vlan 96
switchport mode trunk
switchport nonegotiate
and also its ports members
interface GigabitEthernet0/31
description ITTUR-ESX1_01
switchport trunk native vlan 96
switchport mode trunk
switchport nonegotiate
channel-group 3 mode on
end
Solved! Go to Solution.
01-17-2025 03:13 AM
You need to make some changes on the ESXi side. The vswitch need to be in promiscuous mode. Check this video.
https://www.youtube.com/watch?v=rlxndbdy2zc
01-17-2025 03:13 AM
You need to make some changes on the ESXi side. The vswitch need to be in promiscuous mode. Check this video.
https://www.youtube.com/watch?v=rlxndbdy2zc
01-20-2025 08:52 AM
Hi,
Can you please add the "encapsulation replicate" parameter when configuring the destination span port, ie:
"monitor session 1 destination interface Gi0/48 enc repl"
and check if there is any improvement.
Best regards,
Antonin
01-21-2025 06:54 AM
Hi Amikat I have already tryed to add the enc repl ma nothing is changed
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide