cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
436
Views
0
Helpful
1
Replies

SPAN port question

biggizod
Level 1
Level 1

Hi, i have a switch Cat4510 with ports connected to some device gi1/1 and vlan 90 I want to mirror to another port gi1/10 but that port is in vlan 50 for data and has PC with wireshark and we have remote access to it. So question: if I run monitor session 1 source int gi1/1 both , and monitor session 1 dest int gi1/10   will it capture regardless of that vlans on ports are different?  Do i have to change vlan on the monitoring port or I can leave it as it is ?

Thank you

 

1 Reply 1

mlund
Level 7
Level 7

You don't have to change vlan on the receiving port, you can leave as is, and it will capture. However when you do monitor session 1 destinatin g1/10, at that moment you hit return the g1/10 port will not forward any frames from the attached pc, it will only forward the reflected frames from g1/1. So you can't use the remote access to the pc anymore. You need to have 2 ports on the wireshark pc for remote access to work, one port for the remote access and one port for the mirror port.