Wednesday, January 12, 2011

Cisco port mirroring

conf t
monitor session 1 source interface fa1/0/1
monitor session 1 destination interface fa1/0/15


if your switch doesn't support the monitor session syntax, you will need
to do the following:
interface FastEthernet0/x
port monitor FastEthernet0/a
port monitor FastEthernet0/b

fa0/x is the port your sniffer is plugged into, 0/a and 0/b would be any
ports u want to sniff.

No comments: