The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
39 views

SPAN port only shows multicast traffic on Cisco switch

I'm trying to set up a cheap network forensics solution; I have a Cisco Catalyst as my main switch connected to my router. I have mirrored the port that is running to the ASR to a different port which ...
0
votes
3answers
3k views

Span on multiple monitors when logged into a Citrix session via Citrix Receiver (or Citrix server)

I am using the Citrix Receiver in Windows 8, and on Windows XP on another PC. I often log into work from home and am unable to span the session to dual monitors like one can easily do when using ...
0
votes
0answers
51 views

How many Spans for RAID 10 with 4x500GB SAS Physical Disks for Virtualization Server Data part

I'm setting up a PowerEdge R420 as a Hyper-V server. Windows Server 2012 will be on RAID 1 (2x 160GB SSDs) and Data part I would like to put securely on 4x 500GB SAS HDDs. The question is what would ...
-1
votes
1answer
79 views

Filter incoming span feed to a single vlan

I have a span feed coming in on an un-addressed interface of a linux (centos) box. eth4. The span contains several vlans. I have an application which can grab packets from an interface ...
1
vote
1answer
2k views

RAID 10: SPAN 2 vs SPAN 4

I am currently configuring RAID 10 (first time doing RAID ever) for a server at work. In the Configuration Utility. I am given the option of either span 2 or span 4. Having never done this before, I ...
1
vote
1answer
912 views

Port mirroring on multiple switches

So here is the deal, I have a server on switch A where port 3 is monitoring traffic for most of the ports on switch A. However I have other users on switch B that needs to have port 3 on switch A ...
0
votes
2answers
374 views

Networking: Would my SPAN setup on Cisco router create a switching loop?

I'd like to set up a SPAN [port-mirror] port on our main router. The router is a Cisco 2821. The goal is to be able to troubleshoot Internet issues at the packet level, and it won't happen that ...
2
votes
1answer
119 views

SPAN/Mirrored port usage

I have a HP ProCurve switch with 24 ports. If I set up port 24 to mirror port 1 (which goes to my router), can I use port 24 for normal LAN access as well as to run something like ntop or bandwidthd? ...
2
votes
1answer
307 views

Can I connect multiple SPAN Ports to a hub to monitor both from one NIC

Suppose I had two Cisco switches each outputting some network traffic to a SPAN port, and I needed to send the sum of all that traffic to a third device for monitoring that traffic via libpcap. The ...
4
votes
1answer
485 views

Open source network tap

I've recently begun researching network monitoring solutions. I've configured SPAN on our cisco catalyst, and it's working ok, but I've been reading up on taps too. Most of the articles I've seen ...
1
vote
1answer
372 views

Catalyst 3560G SPAN session not mirroring IGMP packets

I am developing a device which acts as a multicast host, and want to observe it as it responds to IGMP Queries. My Catalyst 3560G is set up as follows (full config below): Port 0/1 is a TFTP server ...
6
votes
1answer
555 views

kvm, vlans, how to simulate a 'mirror' port

I'm working with kvm 0.14.1 on an ubuntu lucid x64 box. I've got 3 vlans configured, one that is a bridge to the host's eth1. The others are host only. I want to start playing with snort. Is there ...
3
votes
3answers
4k views

LVM spanning over multiple disks: What disk is a file on? Can I lose a drive without total loss?

I have three 990GB partitions over three drives in my server. Using LVM, I can create one ~3TB partition for file storage. 1) How does the system determine what partition to use first? 2) Can I find ...
2
votes
1answer
818 views

IP ACL for SPAN port on 3560

My scenario is that I have > 1g of traffic on a switch, but only a 1g monitor port. But the traffic I'm actually interested in is only about 10mbps, the rest can be ignored. I have one 3560 switch, ...