0

I am currently doing packet capture through mirroring with Wireshark as mentioned in this post

I can mirror the traffic to a port physically jacked into and analyze the packets redirected there w/ Wireshark. How can I, if possible, transport that traffic to a laptop or a remote device?

Improve this question

1 Answer 1

Reset to default
1

What you're looking for is called RSPAN - Remote Switch Port ANalyzer. RSPAN copies frames from a monitored port into a (dedicated) VLAN which you connect to the monitoring station.

  1. Set up a VLAN between the monitored switch and the monitoring station.
  2. Configure RSPAN from the monitored port into the RSPAN VLAN.

I found a detailed description for Brocade here.

Improve this answer
1
  • 1
    I do not know about Brocade, but Cisco also has ERSPAN that will actually route the traffic to a remote site, so you do not need a VLAN to span sites.
    – Ron Maupin ♦
    Commented Oct 9, 2020 at 14:49

Not the answer you're looking for? Browse other questions tagged or ask your own question.