RSPAN on 2950 switches

[lerdalt]

I've got one that's puzzling me. I have a small site that has 2 closets separated by a fiber link. Each closet has a stack of 2950 series switches connected using giga-stack connectors.

ClosetA ClosetB
Switch1-1 -----fiber------- Switch2-1
Switch1-2 Switch2-2
Switch1-3 Switch2-3

I have a workstation setup to use TCPDUMP remotely in ClosetA connected to Switch1-1. I have created an RSPAN Vlan and the vlan is allowed on all of my trunk interfaces.

Here is the weird part. I can successfully capture packets via the RSPAN from any switch in ClosetB, but not from either switch 1-2 or 1-3 in ClosetA.

Any thoughts? I've followed my spanning-tree path to make certain I'm not blocking my RSPAN Vlan anywhere, I'm out of ideas now.

 

[unclerico]

You can't capture from 1-2 or 1-3, what about 1-1?

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[lerdalt]

I can from 1-1, but I haven't tried using an RSPAN from there....didn't see a point to it.

 

[burtsbees]

What about connecting the capture pc to the other stack---can you then see 1-1, 1-2 and 1-3, and NOT the 2-2 and 2-3? That would be a trip...are you not able to do that due to distance between the closets?
Also---have you tried hooking the pc to 1-2 and/or 1-3, and then maybe a hub in between on all scenarios?

Burt

 

[lerdalt]

Haven't gone that far Burt. It's a site that is about an 90 miles away, so I'm trying to do what I can remotely. I have a body out there that can move cables and stuff for me.

I'm probably going to have them move the cables into 1-2 or 1-3 and see what happens that way first. Find out what I can and can't see from there.

The real kicker is for the problem I have, I was wanting to capture from 2-3 but there isn't a lot of space on the shelf where those swithes are to setup a pc even.