Ethereal-users: RE: [Ethereal-users] Capture on Cisco 2950 and WinXP with 2 NIC C ards
HI
This may be over-simplifying the situation but you need to check out the
software configuration manual for the 2950 switch. I noted in the lab when
using these that the facilities in the 2950 are different from older
catalyst switches. If memory serves correct I think they are limited to
monitoring only one VLAN and they can only monitor ingress traffic to a port
not outgress (Cisco terms for traffic in and out).
I have these in my network lab and the issues of the changes to SPAN have
cause problems. I suggest a google on the configuration you need, you will
probably find a Cisco cite link that explains full config.
Rick
-----Original Message-----
From: Richard Pawly [mailto:rpawly@xxxxxxxxx]
Sent: 03 March 2004 22:23
To: ethereal-users
Subject: [Ethereal-users] Capture on Cisco 2950 and WinXP with 2 NIC
Cards
I have a computer on a Cisco 2950 that has 2 nic cards 1 for network
connectivity and 1 connected to an additional switch port that is setup for
monitoring. This NIC has no subnet, no gateway, no ip address, and no dns
addys. When I try to put host xxx.xxx.xxx.xxx in the capture filter I get
nothing in the way of packets displayed.
When I erase that capture filter and then start with none and then put a
ip.addr == xxx.xxx.xxx.xxx in the filter of the main window I get the
packets just fine.
I have also just tried giving the 2nd nic (set up for monitoring in the
switch) a ip address gateway and subnet, and when I put host xxx.xxx.xxx.xxx
in the caputre field I get only arp messages asking where the
xxx.xxx.xxx.xxx is and to notify the 2nd nics address.
Before we had a rag tag of diffent switches installed and it was never a
problem worked great but since the installation of the Cisco 2950s this has
been a issue.
Please help.
Thanks
Rich
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users
--
This message has been scanned for viruses and dangerous
content by the NorMAN MailScanner Service and is believed
to be clean.
The NorMAN MailScanner Service is operated by Information,
Systems and Services, University of Newcastle upon Tyne.
