thanks for all for your inputs
ramesh "dre" wrote: ""Reimer, Fred"" wrote in message ... > E gads! All hacks because even at this time Cisco can't manage to write the > little code necessary to create a buffer in memory where packets can be > stored, and then transferred via TFTP. With today's routers that have more > than enough processing power and memory, there's just no excuse, IMO. I, personally, prefer ERSPAN to most other methods. Being able to have an encapsulated stream of capture data available from any available IP routed path (could be the whole Internet), and able to export to your personal workstation, e.g., running tcpdump or Ethereal, is definitely the proper way to be sniffing. OTOH, Junipers should be able to do what you are talking about in some (but not all) cases. Depends on how much traffic you are talking about. The RSPAN+VACL method described on CCO is just as valid as anything else, but requires Cisco Catalyst switches with some type of Layer-3 functionality (e.g. Cat3550, some Cat6k, some Cat4k, others). In the case of a 6500 it requires a PFC card, of which all Sup2 and Sup720 modules include. Sup1/Sup1a needs PFC to do RSPAN. -dre **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Get Your Private, Free E-mail from Indiatimes at http://email.indiatimes.com Buy The Best In BOOKS at http://www.bestsellers.indiatimes.com Bid for Air Tickets on Air Sahara Flights at Prices Lower Than Before. Just log on to http://airsahara.indiatimes.com and Bid Now ! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=74775&t=74708 -------------------------------------------------- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
