SPAN 3560 destination port disconnect

[sefimizra]

Hello,

I configured SPAN (monitor session) on my 3560 switch and it works fine until the destination port disconnect from any reason (shut no shut, cable unplug, restart destination computer). than the destination port don't show any traffic from the source ports.

the problem fix just after I reconfigured the monitor session again.

the configuration I made:

SW_Server_1#monitor session 1 source interface Gi0/1 - 2 , Gi0/4
SW_Server_1#monitor session 1 destination interface Gi0/3

SW_Server_1#sh monitor session all
Session 1
---------
Type                   : Local Session
Source Ports           :
    Both               : Gi0/1-2,Gi0/4
Destination Ports      : Gi0/3
    Encapsulation      : Native
          Ingress      : Disabled

Any Ideas??

Thanks,

Sefi

[Mark Malone]

Does it show any logs when the issue occurs , you could be overloading the port with traffic capturing 2gb interfaces and sending it to 1gb what are those ports running at your capturing

If you use another laptop do you get the same problem

[Peter Paluch · Accepted solution]

Mark,

This sounds more like a bug to me. An asymmetry in the amount of captured traffic and the capacity of the egress interface should not pose any problem. Quoting from documentation to Catalyst 3560:

SPAN sessions do not interfere with the normal operation of the switch. However, an oversubscribed SPAN destination, for example, a 10-Mb/s port monitoring a 100-Mb/s port, can result in dropped or lost packets.

Surely, disconnecting and reconnecting a destination port shouldn't cause the entire SPAN session to stop working entirely.

Best regards,
Peter