10-13-2009 09:10 PM - edited 03-06-2019 08:06 AM
Hi All,
I would like to inquire if ever i put a pc w/ a wireshark member of a vlan for ex. vlan 200,then i run the wireshark is it normal that i see the traffic of other pc even they are on another switch but still member of vlan 200? Appreciate all of your response!
cheers!
reymon
10-13-2009 09:57 PM
Reymon,
it is normal for a span session that you see broadcasts, multicasts, unknown unicasts of the same vlan, but you should not see other traffic
Beat
10-13-2009 10:37 PM
hi beat,
thanks for your response. i havent configured span on the switch, i just run the wireshark and seen the traffic of the two host that were in the same vlan but different switch.
10-13-2009 10:34 PM
Span is used to see traffic on that switch along with other broadcasts and unicast, however if you want to see the traffic on the same vlan, but different swtiches, you need to use Rspan.
10-13-2009 10:42 PM
yes you are right, but i want to clarify if it is possible to see traffic of two host on the same vlan but different switch even i did'nt configure span on the switch. i just run the wireshark on the pc.
cheers!
reymon
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide