cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
542
Views
0
Helpful
3
Replies

Wireshark and Span Question (TCP not showing on Wshark)

John Rener
Level 1
Level 1

Help Wireshark Gurus,

For some reason I was not able to monitor any TCP traffic using Wireshark. Any advise is very much appreciated!! I scoured the community but was not able to find my answer.

 

Local Session

 

Source Ports
Both                   : G1/0/1

Destination Ports: G1/0/2

Encapsulation     :Replicate (I changed from Native to Replicate without success)

Ingress               : Disabled.

 

My destination port is not configured for access/trunk.

3 Replies 3

John Rener
Level 1
Level 1
I found the culprit. Thanks!

What was the problem ?

AV is blocking it.
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card