SPAN rx traffic only

[averheaghe]

We have a 3750 gig running c3750-ipservicesk9-mz.122-40.SE

In an attempt to monitor only received traffic we entered this command;

Monitor session 1 source int gig1/0/1 , gi1/0/4 - 24 rx

But it appears we are still capturing both send and receive traffic.

How do we monitor only send?

Thanks,

Andy

[jbrenesj]

With that config, if you send traffic between a device in port g1/0/4 and g1/0/5 for instance, you'll see bidirectional traffic because SPAN will capture it once it "enters" each port.

I'm not sure if what you see could be explained with the previous example.

What you can do is monitor only one port and see what kind of traffic are you getting in the analyzer