cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
534
Views
0
Helpful
1
Replies

span session

Network Pro
Level 1
Level 1

Hi,

i have a laptop connected to a port on the switch and have set a span session to monitor another port

fa0/30 - phone nortel ip phone

fa-/27 - laptop running wireshark

monitor session 1 source interface Fa0/30

monitor session 1 destination interface Fa0/27

show monitor seession 1

Session 1

---------

Type                   : Local Session

Source Ports           :

    Both               : Fa0/30

Destination Ports      : Fa0/27

    Encapsulation      : Native

          Ingress      : Disabled

i was able to rdp to the laptop when the monitor session was not connected but as soon as i put in the monitor statements i loose connection to the laptiop (rdp) and on the switch the status is up and down but the laptop is running

any thoughts on this pls ?

thanks

1 Accepted Solution

Accepted Solutions

Somasundaram Jayaraman
Cisco Employee
Cisco Employee

Hi,

It is a expected behaviour.

If  we  configure the span session, the destination port would be in   up/down(monitoring) state and the interface would be used only for   monitoring purpose.

The packets are getting replicated   and thats why the RDP session is getting dropped. We can confirm that   by seeing the packet capture.

Hope this answers your question.

Cheers

Somu

Rate helpful posts

View solution in original post

1 Reply 1

Somasundaram Jayaraman
Cisco Employee
Cisco Employee

Hi,

It is a expected behaviour.

If  we  configure the span session, the destination port would be in   up/down(monitoring) state and the interface would be used only for   monitoring purpose.

The packets are getting replicated   and thats why the RDP session is getting dropped. We can confirm that   by seeing the packet capture.

Hope this answers your question.

Cheers

Somu

Rate helpful posts