Configuring port mirroring on the MA561x to capture voice packets?
How to configure port mirroring on the MA561x to capture voice packets? Now I use the MA5616. Any help would be appreciated!
How to configure port mirroring on the MA561x to capture voice packets? Now I use the MA5616. Any help would be appreciated!
I use the MA5616,too,and I bought from www.huanetwork.com
, nice price. The configuration of this problem, please visit: http://momopp.blogdetik.com/
Similar Messages
-
How to configure port mirroring in hyper-v
As the title ,anyone knows ?
Hi Jacky,
Hope following link is useful:
http://www.ms4u.info/2013/05/port-mirroring-on-windows-server-2012.htm
(In the source vm settings go to Network Adapter --> Advanced Features --> On Port Mirroring, set as Source mode. Do the same steps in the target VM and set as destination mode )
Best Regards
Elton Ji
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place. -
Is it possible to do port mirroring on the ISR G2
Is it possible to create a SPAN Port on the ISR G2
First of all: why do you want to put a port in span mode ? Which is your goal and which ISR router are you using ?
Depending on what you want to do and your hardware and IOS release you can proceed in many ways:
some ISR support SPAN as far as switch module, for example
http://www.cisco.com/c/en/us/td/docs/routers/access/1800/1801/software/configuration/guide/scg/dhcpvlan.html#pgfId-1013148
http://www.cisco.com/c/en/us/td/docs/routers/access/interfaces/software/feature/guide/eesm_sw.html#wp1898606
if you are using ISO 15.0 or later configure embedded packet capturehttp://www.cisco.com/c/en/us/td/docs/ios-xml/ios/epc/configuration/15-mt/epc-15-mt-book/nm-packet-capture.html
if you need a network analysis tool for a long time, install SRE board with Prime NAM software
finally you can connect router to a switch and monitor traffic on the switch
Bye,
enrico
PS please rate if useful -
SG 300-28: port mirroring: the destination host looses network connectivity
Hi,
we have two SG 300-28. On one of them i configured port mirroring because one host behaves strangely. When i create the mirror, the host connected to the destination port is not accesible any longer, e.g. he does not answer to a ping. The packets from the source port appears on the destination port, but no packet intended for the host itself. Is this behaviour right ? I accepted that the host on the destination port is still accessible as it would be without the mirror.
BerndHe Bernd,
Yes. This behaviour is right. That's how Port Mirroring works. The host connected to the Destination port loses its connectivity and it can only act as a monitoring device using softwares like WireShark (and monitor packets coming to and from the Source port(s)). All configurations on the destination port are overridden.
Let me know if you need further help,
HTH,
Vijay
Please rate useful posts -
Port mirroring on SG300 questions
Hi all,
I'm troubleshooting a LAN issue I have, and I wanted to hook up wireshark to record traffic over the course of a couple of hours for later diagnostics. I went into the web administration interface, clicked Administration > Diagnostics > Port and VLAN Mirroring, and added a port mirror from the port I wanted to watch to a port to which I had connected a laptop. I picked the Tx and Rx options, and clicked Apply.
I did receive lots of traffic in wireshark, but I noticed immediately that the server on the port I had mirrored was suddenly unavailable on the network -- pings timed out. This lasted until I removed the mirror, then the server was suddenly reachable once again.
Does this feature not work the way I had thought it does? What I saw looked more like a forward than what I would call a mirror. The documentation leads me to believe mirroring is intended to be used in just the way I was attempting to use it.
Am I missing something?Hi Lamint,
I have a SG300-10P for my test, I did the same thing you did in my GUI.
I was mirroring port 7 to port 8 ticking the item to mirror RX and TX
My PC with wireshark was residing on port 8.
I started a comtinuous oibg from my PC on port 7 at IP address 192.168.10.60 to my WAN routers LAN address, 192.168.10.1 .
As you can see from my screen capture below, my PC on port 8 caprtured both RX and TX packets on port 7.
Because my wireshark PC was on port 8, I could not access the management interface of the switch to show you my configuration, so I grabbed the configuration via hyperterminal.
See screen caopture below ( with some configuration items excluded)..
I would suggest, if you are having issues to allow the Small Business Support Center to assist you.
http://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html
Hope this helps
regards Dave -
I want to configure port mirroring on SG300 swtich
Source Port gi10
Destination port gi1
You can see my configuration from the attached jpg file.
Problem is port monitoring status is "Not Ready" , and i can not monitor the source interface!Hi Egemen,
I have the same thing happenning on my SG300-10P, see screen capture below.
Then I plugged some devices into ports G8 and G9.
It was noted that the status changed to the following, see screen capture below.
Check your link state on the front of the switch or use to GUI to look at the port states. If one of those two ports does not have link, the switch will report "not ready."
You may find additional useful information under status and statistics> view log >ram memory can give you details about what is happening with port states, so check your error log.
( note: logging may have to be enabled via Administration >log settings )
regards dave -
Has anyone had any success with port mirroring on the RV180?
The data sheet refers to port mirroring capability, but I can't find the configuration settings anywhere?Duplicate posts.
Go here: http://supportforums.cisco.com/discussion/12156511/rv180-port-mirroring -
Port mirroring with ALOT of Drops Tx on a 5406zl
Hi everybody.
My first post here and I'm convinced that the questions I have will be easily answered by several of the true experts that reside here in the forum.
Question #1.
I've set up port mirroring this way on my HP procurve J8697A Switch 5406zl (Software revision K.15.12.0015)
sw-dh-1(config)# show monitor 1
Network Monitoring
Session: 4 Session Name:
Mirror Destination: B13 (Port)
Monitoring Sources Direction Truncation Mirror Policy
Port: F1 Both No -
Port: F2 Both No -
Port: F3 Both No -
sw-dh-1# show monitor 2
Network Monitoring
Session: 3 Session Name:
Mirror Destination: A6 (Port)
Monitoring Sources Direction Truncation Mirror Policy
Port: A7 Both No -
Port: B6 Both No -
Port: B10 Both No -
Port: Trk5 Both No -
Port: Trk9 Both No -
Port: Trk11 Both No -
See output of "show interface" below. I'm worried about "Drop Tx". What does that mean exactly? Are mirrored packets dropped or does this mean that the ordinary traffic on the monitoring ports are also affected? If yes, how? Data loss, resending packets, loss of speed, high CPU load on the switch?
sw-dh-1# show interfaces B13
Status and Counters - Port Counters for port B13
Name : <removed>
MAC Address : xxxxxx-xxxxx
Link Status : Up
Totals (Since boot or last clear) :
Bytes Rx : 576 Bytes Tx : 4,252,895,128
Unicast Rx : 0 Unicast Tx : 3,440,299,294
Bcast/Mcast Rx : 9 Bcast/Mcast Tx : 412,639,331
Errors (Since boot or last clear) :
FCS Rx : 0 Drops Tx : 29,441,235
Alignment Rx : 0 Collisions Tx : 0
Runts Rx : 0 Late Colln Tx : 0
Giants Rx : 0 Excessive Colln : 0
Total Rx Errors : 0 Deferred Tx : 0
Others (Since boot or last clear) :
Discard Rx : 0 Out Queue Len : 0
Unknown Protos : 0
Rates (5 minute weighted average) :
Total Rx (bps) : 0 Total Tx (bps) : 5,002,088
Unicast Rx (Pkts/sec) : 0 Unicast Tx (Pkts/sec) : 0
B/Mcast Rx (Pkts/sec) : 0 B/Mcast Tx (Pkts/sec) : 6
Utilization Rx : 0 % Utilization Tx : 0.50 %
sw-dh-1# show interfaces A6
Status and Counters - Port Counters for port A6
Name : <removed>
MAC Address : xxxxx-xxxxx
Link Status : Up
Totals (Since boot or last clear) :
Bytes Rx : 960 Bytes Tx : 1,442,037,177
Unicast Rx : 0 Unicast Tx : 1,988,961,810
Bcast/Mcast Rx : 15 Bcast/Mcast Tx : 339,915,002
Errors (Since boot or last clear) :
FCS Rx : 0 Drops Tx : 1,647,165,303
Alignment Rx : 0 Collisions Tx : 0
Runts Rx : 0 Late Colln Tx : 0
Giants Rx : 0 Excessive Colln : 0
Total Rx Errors : 0 Deferred Tx : 0
Others (Since boot or last clear) :
Discard Rx : 0 Out Queue Len : 0
Unknown Protos : 0
Rates (5 minute weighted average) :
Total Rx (bps) : 0 Total Tx (bps) : 5,000,000
Unicast Rx (Pkts/sec) : 0 Unicast Tx (Pkts/sec) : 0
B/Mcast Rx (Pkts/sec) : 0 B/Mcast Tx (Pkts/sec) : 0
Utilization Rx : 0 % Utilization Tx : 0.50 %
Utilzation and total last 5 minutes is off since I turned the mirroring off when I saw the drops. Utilization when port mirroring was on was 20-35%.
Question #2:
Is it better if I mirror out all traffic to the 10GB port instead? Assuming that it is possible to do port mirroring to the 10GB port?
best regards,
Dean YYou don;t indicate which router you have, but that doesn;t really matter.Neither the Actiontec MI424-WR or the Quantum G1100 have port mirroring. You need qan old fashioned hub, or a managed switch that supports it.
-
Port mirroring on A90-9100EM​15-10
Hey all -
I have the A90-9100EM15-10 FiOS router and I'd like to setup port mirroring from the router if it has the capability (I know, I know...this is typically done from a switch). Anyway, rather than purchase a managed switch or build a linux-based "switch" and place it inline, I'd be content with the ability to passively monitor traffic. I prefer to monitor traffic both directions but outgoing would suffice.
Does anyone know if my model FiOS router has such a capability?
Cheers,
EnegThe 9100EM does not support port mirroring.
You might want to find a hub and use that to mirror the traffic.
http://shop.ebay.com/?_from=R40&_trksid=p5197.m570.l1313&_nkw=ethernet+hub&_sacat=See-All-Categories
Be careful though, many of those listed claim to be hubs are not and are in fact switches. -
SLM2024 port mirroring breaks network connections
Hi all, I got an SLM2024 that I want to use with my network probe app to analyze packets, I have my network probe PC plugged into the target port and uplink to firewall's trusted port to source port of 2024. Now whenever I enable port mirroring on the 2024, I lose all network connections on the 2024, I searched around here but didn't really find my answer. If anyone's seen this before, any pointers would be great.
Hi Crash, thanks for the reply, yeah it's a similar setting on that model just with a different layout on the admin page, what I meant on the trusted port part is, I have a netscreen firewall and the trusted port of the firewall goes into the source mirrored port of the slm2024, and my PC is on the target port. And I have those mirrored with a setting for both tx and rx, whenever I enable mirroring it halts traffic from the firewall, and others that are on the 2024 like server/workstns.
But network probe works and I can see traffic. We had a cisco catalyst before and that had no problems using the span feature. -
Does the autonomous 1242AG forward broadcast packets?
I have an autonomous Cisco 1242AG AP connected to L2 switches.
Let's say I have 100 wired devices each sending 2 broadcast UDP packets per second.
Obviously these packets will reach the Access Point switch port, but will the AP actually send these packets (200 pps) into the air?
ThanksHere is the configuration guide for the WLC 4402 and 1130AG follow the configuration guide which will help you
http://www.cisco.com/en/US/docs/wireless/controller/4.2/configuration/guide/c42mfw.html
http://cisco.com/en/US/docs/wireless/access_point/12.4_3g_JA/configuration/guide/ios1243gjaconfigguide.html -
storage-vdc(config-if)# show module
Mod Ports Module-Type Model Status
2 32 1/10 Gbps Ethernet Module N7K-F132XP-15 ok
sw1-gd78(config-if)# sh module
Mod Ports Module-Type Model Status
2 48 1/2/4/8 Gbps FC Module DS-X9248-96K9 ok
4 8 10 Gbps FCoE Module DS-X9708-K9 ok
7 0 Supervisor/Fabric-2a DS-X9530-SF2AK9 active *
8 0 Supervisor/Fabric-2a DS-X9530-SF2AK9 ha-standby
10 22 4x1GE IPS, 18x1/2/4Gbps FC Module DS-X9304-18K9 ok
Mod Sw Hw World-Wide-Name(s) (WWN)
2 5.2(2) 1.1 20:41:00:0d:ec:fb:8a:00 to 20:70:00:0d:ec:fb:8a:00
4 5.2(2) 0.107 --
7 5.2(2) 1.8 --
8 5.2(2) 1.8 --
10 5.2(2) 1.3 22:41:00:0d:ec:fb:8a:00 to 22:52:00:0d:ec:fb:8a:00
sw1-gd78(config-if)# sh run int ethernet4/6
!Command: show running-config interface Ethernet4/6
!Time: Mon Feb 20 22:56:12 2012
version 5.2(2)
interface Ethernet4/6
no shutdown
sw1-gd78(config-if)# no shut
sw1-gd78(config-if)# speed 1000
ERROR: Ethernet4/6: Configuration does not match the port capability.
sw1-gd72# sh int ethernet4/6 capabilities
Ethernet4/6
Model: DS-X9708-K9
Type (SFP capable): 10Gbase-SR
Speed: 1000,10000
Duplex: full
Trunk encap. type: 802.1Q
Channel: yes
Broadcast suppression: percentage(0-100)
Flowcontrol: rx-(off/on/desired),tx-(off/on/desired)
Rate mode: dedicated
QOS scheduling: rx-(2q4t),tx-(1p3q4t)
CoS rewrite: yes
ToS rewrite: yes
SPAN: yes
UDLD: yes
Link Debounce: yes
Link Debounce Time: yes
MDIX: no
Port Group Members: none
TDR capable: no
FabricPath capable: yes
Port mode: Switched
sw1-gd72# sh int ethernet4/6 transceiver details
Ethernet4/6
transceiver is present
type is 10Gbase-SR
name is CISCO-FINISAR
part number is FTLX8571D3BCL-CS
revision is C
serial number is FNS12090EMJ
nominal bitrate is 10300 MBit/sec
Link length supported for 50/125um OM2 fiber is 82 m
Link length supported for 50/125um OM3 fiber is 300 m
Link length supported for 62.5/125um fiber is 26 m
cisco id is --
cisco extended id number is 4
SFP Detail Diagnostics Information (internal calibration)
Alarms Warnings
High Low High Low
Temperature 36.21 C 75.00 C -5.00 C 70.00 C 0.00 C
Voltage 3.29 V 3.63 V 2.97 V 3.46 V 3.13 V
Current 8.11 mA 11.80 mA 4.00 mA 10.80 mA 5.00 mA
Tx Power -2.65 dBm 1.49 dBm -11.30 dBm -1.50 dBm -7.30 dBm
Rx Power -2.21 dBm 1.99 dBm -13.97 dBm -1.00 dBm -9.91 dBm
Transmit Fault Count = 0
Note: ++ high-alarm; + high-warning; -- low-alarm; - low-warningAnkit,
You are trying to set speed 1000 on a 10g sfp.
type is 10Gbase-SR
You will need to insert a 1gig sfp and then you will be able to set the speed.
Also, I noticed that you posted first with interface 2/6 and the output you gave me was for 4/6. Are you sure you're in the right interface? -
Configuring a 5508 via the SFP ports
Is there anyway to configure a 5508 via the SFP ports? Or do you have to use the service port for autoinstall or NCS auto provisioning? It looks like it grabs a DHCP address but it doesn't seem to like telnet,ssh ,http or https. There isn't anyone onsite.
Thanks, I got it figured out. The 5508 was plugged up to a switch that was configured for lag (for the 5508 that was hooked up before). I changed the port channel to put the native vlan on one that hands out DHCP. The blank 5508 grabbed an ip but wasn't working. I ended up disabling the other ports connecting to the 5508. I defaulted the switchport that was connected to the 5508's SFP port 1 and put it in the right access vlan. I was then able to ping the IP it grabbed and http in to it.
thanks though! -
Cat 3750-Span (Port Mirroring issue)
Hello team
I am facing port mirroring issue in my setup. Details of the setup are mentioned below
Setup--
Stack of 4 catalyst switches WS-C3750X-48P running software 15.0(1) SE3 .Approximately 12 vlans are configured in this setup and port mirroring is done for all vlans with destination configured as single Gig Ethernet port...The setup works fine from mirroring perspective for 3-4 days and after that machine connected to destination port stops getting data.
Observations-
It has been observed that during the issue, the port configured for mirror destination has lot of packet drop/input errors on the port statistics.
If we configure only TX packet mirroring, it works for 8 -10 days
If we configure TX & RX packet mirroring, it works for 2-3 days
Testing done
Tried clearing counter on destination port but no success (mirroring doesn’t start)
Tried shut /no shut for the destination port but no success.
Tried restarting the machine connected to destination port but no success
Workaround
We need to reconfigure the mirroring configuration after removing the mirroring config from the switch. Once the same is done, mirroring starts working.
Want to understand
1-is there any HW limitation for the switch (destination port not capable of handling mirroring traffic)
2-is there any software related issue?
3-what can be permanent resolution for the same..Hello
We have tried this previously but found same result.
1- we deleted the monitror session and recreated again with same session number
2-we deleted the monitor session and created new session (session id diffrent ) with same config..
in both cases its working for 3-4 days.. -
VSphere Port Mirror - Possible Bug Found
Hi,
Something i came across to and thought could be worth while reporting it since i havent seen any reference to it elsewhere:
We've configured a few "source remote port mirror rules" for a few VMs, in a way that each VM had 3 vNics that were mirrored.
long story shot: one VM had one vNic that was E1000 and not VMXNET3 like all the others, each time i enabled the "source remote port mirror" rule for the E1000 vNic, all other port mirrors (from this VM and other VMs located on the same ESX) stopped working. problem was solved after i removed the vNic and created a new one, this time a VMXNET3 vNic.
didnt see any reference about E1000/VMXNET3 regarding vSphere Port Mirroring. New bug maybe?Hi,
Something i came across to and thought could be worth while reporting it since i havent seen any reference to it elsewhere:
We've configured a few "source remote port mirror rules" for a few VMs, in a way that each VM had 3 vNics that were mirrored.
long story shot: one VM had one vNic that was E1000 and not VMXNET3 like all the others, each time i enabled the "source remote port mirror" rule for the E1000 vNic, all other port mirrors (from this VM and other VMs located on the same ESX) stopped working. problem was solved after i removed the vNic and created a new one, this time a VMXNET3 vNic.
didnt see any reference about E1000/VMXNET3 regarding vSphere Port Mirroring. New bug maybe?
Maybe you are looking for
-
Poor Performance with my new System
Hi All, Great Forum. Hopefully someone here can provide me some direction. I just built my first AMD based system (spec's below). Everything is running smooth and stable, but I dont believe I am getting the performance out of this rig as I should.
-
OS X doesn't load after battery failure
Hi! I have a mid 2009 MacBook Pro and my battery is almost dead, today I forgot to connect my Mac to the plug and the Mac just shut down due lack of battery (i don't get my warning anymore). When I tried to boot again, it gets stuck with the Apple lo
-
PE 12 organiser wont open, edit photo yes open
win 7, PE12 photoshop and premier element are install. Photoshop organiser wont open. I open it if I go in C/ program file 86/ adobe....but not directly on desktop.
-
Siebel Operation Insert Step Issue
Hi, In Siebel 8.0, while using Siebel Operation Step in workflow, strangely we are facing one issue today. In our Wf, we have 2 Siebel Operation steps continuously one after the other. 1) Siebel Operation to insert 1 record into table CX_EAI_LOG tabl
-
Boot failed: solaris server does not boot
Hi All, one of my support person who has administrator previlages tried move the contents of root to trash directory, in the middle it got hung,and he had restrted the server. Now the solaris does not boot. It says boot failed Enter Filename [platfor