Re: SPAN question

From: Pavel Bykov (slidersv@gmail.com)
Date: Mon Dec 08 2008 - 11:20:50 ARST


It's either an old book, or author made a mistake.
I know from practical experience, that this is not a requirement.

Also, please check out the following documents:
http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_44_se/configuration/guide/swspan.html#wp1036686

Especially "Destination Port" and "Source port" requirements.
E.g. there it states:
Source ports can be in the same or different VLANs.
etc.
you can even sniff trunks with encapsulation.

On Mon, Dec 8, 2008 at 2:10 PM, GAURAV MADAN <gauravmadan1177@gmail.com>wrote:

> Hi
>
> I am really not sure .. where i read this (couldnt rrecollect)
> just gava a random search in google and found :
>
>
> http://books.google.com/books?id=-rnt_ik0mSYC&pg=PA482&lpg=PA482&dq=span+source+and+dest+in+same+vlan&source=web&ots=LDb-x54w0e&sig=1JJ9VIJEHHQOkugjl6QCVQ_nmyQ&hl=en&sa=X&oi=book_result&resnum=1&ct=result
>
> It states :
>
> SPAN dest port and SPAN source port need to be in same vlan.
>
> PLease do correct me in case i am wrong
>
> Gaurav Madan.
> On Mon, Dec 8, 2008 at 4:42 PM, Pavel Bykov <slidersv@gmail.com> wrote:
>
>> Where did you read that they need to be in the same VLAN?
>> That is not true.
>> Right now you are receiving anything that flows through Fa 1/0/9.
>> Are data really flowing through Fa 1/0/9?
>>
>> On Mon, Dec 8, 2008 at 12:07 PM, GAURAV MADAN <
>> gauravmadan1177@gmail.com> wrote:
>>
>>> Hi Frnds
>>>
>>> Just to understand something better on SPAN ; I tested sniffing on a port
>>> on
>>> diff vlan (but landed in more confusion)
>>>
>>> i.e
>>>
>>> Rack1SW3(config)#do sh monitor sess 1
>>> Session 1
>>> ---------
>>> Type : Local Session
>>> Source Ports :
>>> Both : Fa1/0/9
>>> Destination Ports : Fa1/0/10
>>> Encapsulation : Native
>>> Ingress : Disabled
>>>
>>> Rack1SW3(config)#do sh run int f1/0/9
>>> Building configuration...
>>> Current configuration : 62 bytes
>>> !
>>> interface FastEthernet1/0/9
>>> switchport access vlan 10
>>> end
>>> Rack1SW3(config)#do sh run int f1/0/10
>>> Building configuration...
>>> Current configuration : 62 bytes
>>> !
>>> interface FastEthernet1/0/10
>>> switchport access vlan 2
>>> end
>>>
>>> Rack1SW3(config)#do sh run int vlan 10
>>> Building configuration...
>>> Current configuration : 55 bytes
>>> !
>>> interface Vlan10
>>> ip address 10.0.0.1 255.0.0.0
>>> end
>>>
>>> I am just send some pkts from external source to 10.0.0.1 (src 10.0.0.4say
>>> )
>>> PC with etherial is connected to f1/0/10
>>>
>>> I am able to SNIFF .. Am i doing something wrong ..
>>> As i understand SPAN source and dest need to be in same vlan .
>>>
>>> Gaurav Madan
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>> --
>> Pavel Bykov
>> ----------------
>> Don't forget to help stopping the braindumps, use of which reduces value
>> of your certifications. Sign the petition at
>> http://www.stopbraindumps.com/
>>
>
>

-- 
Pavel Bykov
----------------
Don't forget to help stopping the braindumps, use of which reduces value of
your certifications. Sign the petition at http://www.stopbraindumps.com/

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Thu Jan 01 2009 - 12:53:08 ARST