cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
338
Views
0
Helpful
1
Replies

SPAN VLAN cannot see all traffic

Matt Roberts
Level 1
Level 1

I'm capturing traffic with wireshark and when I capture a VLAN all I see is the source VLAN and destination is broadcast. Why do I not see traffic to other vlans? I would think I would see traffic from the VLAN going to the server VLAN (exchange, file servers, ect) and internet traffic. 

 

Here is how I have the SPAN configured. The switch is a 2960-x

Session 1
---------
Type                     : Local Session
Source VLANs             :
    Both                 : 110
Destination Ports      : Gi2/0/15
    Encapsulation      : Native
          Ingress      : Disabled

 

1 Reply 1

Jose Solano
Level 4
Level 4

Hi,

 

Vlan SPAN only monitors traffic that leaves or enters Layer 2 ports in the VLAN, you will not see routed traffic.

 

Hope this helps