SPAN on 3550

[mholbert]

I am trying to configure my 3550 so that I can capture instant messenger messages for my entire network. I found some documentation that says I should enable SPAN, but I can't make any sense out of 'Egress Source/Monitored Interface' and 'Destination/Monitoring Interface'.

I am using a utility that says if I can configure SPAN, I will be able to capture all messenger logs.

Help!!

MH

 

[KiscoKid]

I've attached the following URL which may help

http://www.cisco.com/en/US/products...figuration_guide_chapter09186a00801ce027.html

However in essence, you just need 2 lines


monitor session 1 source interface fastEthernet0/10


(where the device you want to monitor is attached to fa0/10) and


monitor session 1 destination interface fastEthernet0/11


where the device that is doing the monitoring (usually a network sniffer) is located.

 

[mholbert]

I think I am missing the basic Cisco knowledge to make sense out of some of this.

For Instance, when you say "where the device that is doing the monitoring (usually a network sniffer) is located." do you mean I need a computer physically plugged into that port on the 3550? And the network sniffer (in this case a utility to track instant messages) is installed on that computer?

And when you say "where the device you want to monitor is attached to fa0/10"? I want to monitor the entire network for instant messenger traffic.

I inherited this network and it is a little strangely configured (in my limited knowledge opinion).

Basically, I have a PIX firewall that plugs into port 1 on my 3550. I have about 10 2950's that plug into other ports on the 3550, and quite possible plug into another switch (daisy chained) somewhere down the line. The 3550 is configured with two VLan's, and I have two subnets (.30 & .90) that handle all the network traffic.

Does that make sense?

Thanks in advance for your time. This is a little over my head, but I suspect once I get a general understanding of the terminology and architecture, I will not have any problems.