Questions tagged [mirror]
For questions about port mirroring on a network device, where a network switch sends a copy of network packets seen on one switch port (or an entire VLAN) to a network monitoring connection on another switch port.
52
questions
0
votes
1
answer
237
views
SPAN/RSPAN monitoring VLAN vs Interface
I am a little lost with regards to the concept of capturing every traffic passing a core switch. If we set our monitor source to be all VLANs in a L3 switch, does that mean that traffic coming from a ...
- 3
2
votes
1
answer
53
views
ERSPAN between two routers
My goal is to have two ERSPAN sessions between two routers, R1 and R2.
Currently, one ERSPAN session is already configured from R1 to R2, copying traffic of vlan 35 to a physical port on R2.
I need to ...
- 590
1
vote
0
answers
83
views
Port mirroring traffic on Hyper-V not showing Layer 3-7 traffic [closed]
We've been experiencing some issues with port mirroring that is used by a Network Intrusion detection system. Our company uses AlienVault as a SIEM and uses a Hyper-V sensor which is used to forward ...
- 11
0
votes
0
answers
288
views
Dropping packets when mirroring a switch trunk port
I'm building a test lab to support a networking monitoring application I'm developing.
I have written a simple UDP packet generator and receiver, and I use iperf3 to create some bulk background ...
0
votes
2
answers
362
views
How to Balance SPAN Traffic from Redundant Switches
So we are wanting to deploy an IDS device to capture EAST-WEST traffic in a LAN.
The actual topology is more complicated but our issue boils down to this:
We are attempting to configure SPAN sessions ...
0
votes
1
answer
680
views
Capture traffic flowing through a Brocade switch remotely
I am currently doing packet capture through mirroring with Wireshark as mentioned in this post
I can mirror the traffic to a port physically jacked into and analyze the packets redirected there w/ ...
1
vote
1
answer
58
views
Can use virtual port as the port mirroring's destination port?
Port mirroring can mirror several source port to a destination port(mirroring port).
I have several questions about port mirroring.
in the dest port, how to differentiate the different source port? ...
- 1,777
0
votes
2
answers
51
views
why it isnt possible to convert span into rspan by cabling two ports?
On a on a switch that only support span, and dont support rspan, as long as span only allow destination port to be on the same switch as the source, why cant we connect two switch ports together with ...
- 1
1
vote
1
answer
238
views
Port mirroring question
I've got some questions about my port mirroring configuration. I'm working with alcatel omniswitch.
After configuring port mirroring my destination port is loosing network connection and it can't ...
- 13
1
vote
1
answer
2k
views
mirroring-group not possible on Aruba switch
I am currently in the situation of needing to monitor several ports on a Aruba 2530-24G simultaneously from several other ports. Those are basically HP devices, right?
A good solution would be a ...
- 115
1
vote
1
answer
58
views
Getting Mulitple Source IP addressess when doing Port Monitoring
I have a Cisco 2960 switch that I'm trying to find which device IP address is connected to each port...
My Setup:
monitor session 1 source interface gigabitethernet 0/5
monitor session 1 destination ...
- 11
1
vote
1
answer
1k
views
How to do port mirroring in Juniper EX2200 switch
I am using Juniper EX2200 switch, one of the connected System generating lot of unwanted traffic ( varying from 10 Mb to 25 Mb upload traffic). I wanted to analyse those traffic using port mirroring ...
2
votes
2
answers
92
views
Obtaining packet switch-port information via a mirrored port?
When sampling a mirrored port of a switch, is there any means of determining the switch-port information of the packet?
Since Ethernet packets do not contain this information, I assume the answer is ...
- 169
0
votes
1
answer
369
views
Measurable performance impact of port mirroring on a firewall\security device?
I am setting up a network monitoring device which recommends that I create a mirror interface on my firewall/security appliance and send all packets to the monitor for sniffing, logging, and ...
- 101
3
votes
1
answer
85
views
Ability to monitor all broadcast domains
Example:
Network of company A has 5 VLANs: Accounting, IT, Guests, Servers, Board.
All VLANs has DHCP servers enabled in their own VLANs. I am monitoring a single VLAN for DHCP packets by connecting ...
- 33