Removed SPAN configuration and reconfigured.... net-gig2#conf t Enter configuration commands, one per line. End with CNTL/Z. net-gig2(config)#monitor session 1 source interface Gi0/21 net-gig2(config)#monitor session 1 destination interface Gi0/22 net-gig2(config)#^Z net-gig2# net-gig2#sh monitor Session 1 --------- Type : Local Session Source Ports : Both : Gi0/21 Destination Ports : Gi0/22 Encapsulation : Native Ingress : Disabled
net-gig2# Port 21 has my work desktop (Windows XP) - 192.168.1.206 Port 22 has laptop with Wireshark installed (Windows XP) - 192.168.1.240 Capture packets in promiscuous mode is checked. Packet capture started on interface connected to Cat5 cable and reporting ip address in the interface details. Packet captures show no traffic between 192.168.1.206 and actual destinations (www.4thegame.com - 213.160.120.1). When http attempt is made to www.4thegame.com (213.160.120.1) all I see is: Source Destination Protocol Info 127.0.0.1 213.160.120.1 ICMP Echo (ping) request Intertwined between the pings are the following packages: Source Destination Protocol 192.168.1.206 192.168.1.240 TCP(and othes) It appears anything destined for outside the network is show as to the destination IP of the monitor/analyzer This is the same for all traffic. Am I missing something? Should I remove the IP address of the monitoring system? I tried that before but with no positive results. Giles Coochey said the following on 10/10/2007 9:58 AM: >> Obviously the port monitoring is incorrect. Cisco does a great job of >> being inconsistent across their product line (but don't tell that to > the >> layer 3 guys - most insist Cisco can do no wrong as an article of > faith). > > Are you sure that the port monitoring is wrong for a 3560? > > Maybe I'm missing something. > > Giles > _______________________________________________ > Wireshark-users mailing list > Wireshark-users@wireshark.org > http://www.wireshark.org/mailman/listinfo/wireshark-users -- Chad S. Webb Systems Administrator General Dynamics Information Technology NOAA\NESDIS\NCDDC Bldg 1100 Rm 117 Stennis Space Center, MS 39529 Voice: 228.688.3808 Email: [EMAIL PROTECTED]; [EMAIL PROTECTED] www.gdit.com _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users