Smart questions
Smart answers
Smart people
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Member Login

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips now!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

Join Tek-Tips
*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

LINK TO THIS FORUM!

Add Stickiness To Your Site By Linking To This Professionally Managed Technical Forum.
Just copy and paste the
code below into your site.

Partner With Us!

"Best Of Breed" Forums Add Stickiness To Your Site
Partner Button
(Download This Button Today!)

Feedback

"...Many thanks to you for putting it together and to the forum members for taking the time to post their replies and give their time to help others. Their isn't another site that can touch it..."

Geography

Where in the world do Tek-Tips members come from?
achtung (TechnicalUser)
6 Feb 09 10:13
Good Morning,
I want to test the mirror port and I have configured the mirror port where I connected a wireshark ( on port 3 )
On port 1 I have a client and from client launch a telnet connection to the server.
I only see the traffic from client to server but no viceversa

Thanks
Giuseppe
hokage (IS/IT--Management)
24 Feb 09 12:21
mmm can i see the mirroring configuration?.

greetings
fushnicken (Vendor)
25 Mar 09 0:59
Giuseppe,

The ExtremeXOS port mirror is going to send the mirrored packet to your Wireshark based on how the packet comes into the switch.  So, if the telnet packet comes into the switch on a TAGGED vlan the packet will be mirrored to wireshard with as tagged.  If the PC running wireshark has a NIC that cannot read tagging then wireshark will not be able to read the packet.  You are probably mirroring both directions, but your PC NIC is only showing you the untagged direction.  If it is a Broadcom or Intel NIC there are registry entries that you can modify that will allow you to see VLAN tagging. Example, Dell Laptop with BCOM or Intel NIC.  Google for instructions on your NIC.   

I use a Netgear GA511 PCMCIA card for wireshark.  It allows me to see untagged and tagged mirrored packets without any problems.  

Try using a different PC and NIC card, or use a third party NIC, such as a Netgear.  

I hope this helps you.  

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close