Set 3com SuperStack 3 Switch 4500 Port Mirroring (SPAN)
I do not have the intention to promote any products in this blog. This post is for me to record down the setup and it is pretty simple to do it in console or remote session.
<4500> system-view [4500] interface Ethernet 1/0/1 [4500-Ethernet1/0/1] mirroring-port ? both Mirror the inbound and outbound packets of the interface inbound Mirror the inbound packets of the interface outbound Mirror the outbound packets of the interface [4500-Ethernet1/0/1] mirroring-port both [4500-Ethernet1/0/1] quit [4500] interface GigabitEthernet 1/0/27 [4500-GigabitEthernet1/0/27] monitor-port [4500-GigabitEthernet1/0/27] quit [4500] display mirror Monitor-port: GigabitEthernet1/0/27 Mirroring-port: Ethernet1/0/1 both
Both inbound and outbound traffic will be mirrored to Gigabit Ethernet 1/0/27, and you are able to get your monitoring server to receive the traffic from this monitoring port.
That’s all for today.
Tags: 3com, Port Mirroring, SPAN, Switch
September 23rd, 2008 at 8:26 am
keep up the good work and information sharing dude..looking forward with your security related issue especially monitoring network.