I haven't tried it on a 2916, but on a 1900, there's an annoying situation whereby you can configure the monitored and monitoring ports but not have the port monitoring feature actually enabled. I wonder if that could be happening to you. Here's a mini-case study I wrote:
The following output shows a common mistake that is made with the monitor-port command. The user assumed that port monitoring was working, but in fact it was not working because only the parameters had been configured. The port monitoring feature had not been enabled. The user had a protocol analyzer connected to switch port 0/11. The user expected the analyzer to see the Ping packets which traveled from switch port 0/12 to an external network, but the analyzer did not see the packets. (config)#monitor-port ? monitored Set monitored port port Set monitor port (config)#monitor-port monitored 0/12 (config)#monitor-port port 0/11 (config)#exit #ping 172.16.50.1 Sending 5, 100-byte ICMP Echos to 172.16.50.1, time out is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 40/40/40/ ms The analyzer did not see the five ping packets that the switch sent when the ping 172.16.50.1 command was entered. Using the show port monitor (note that the show command reverses the words port and monitor and leaves out the hyphen), the user discovered that port monitoring was not enabled. After enabling the feature, the analyzer did see the ping commands. #show port monitor Port monitoring state: Disabled Monitor port: Ethernet 0/11 Ports being monitored: Ethernet 0/12 #config t Enter configuration commands, one per line. End with CNTL/Z (config)#monitor-port (config)#exit #ping 172.16.50.1 Sending 5, 100-byte ICMP Echos to 172.16.50.1, time out is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max 40/42/50/ ms # Priscilla At 04:45 PM 1/31/02, george gittins wrote: >I had a router and a esniff monitoring traffic and it was connected to a >hub. I rmoved the hub and place a switch 2900 xl . the sniffer is connected >to port 2 and the router and the pix is connected to port 4 and the router >to port 5 . the sniffer wont get any traffic? >what im adoing wrong > >Tech-2916XL-56462#show port monitor >Monitor Port Port Being Monitore >------------------ ------------------- >FastEthernet0/2 FastEthernet0/4 >FastEthernet0/2 FastEthernet0/5 >FastEthernet0/2 FastEthernet0/6 >FastEthernet0/2 VLAN1 >Tech-2916XL-56462# > >interface FastEthernet0/1 >! >interface FastEthernet0/2 > description link to esniff > port monitor FastEthernet0/4 > port monitor FastEthernet0/5 > port monitor FastEthernet0/6 > port monitor VLAN1 >! >interface FastEthernet0/3 > speed 100 > duplex full >! >interface FastEthernet0/4 > description link to pix 520 >! >interface FastEthernet0/5 >! >interface FastEthernet0/6 > description link to 7513 >! >interface FastEthernet0/7 >! ________________________ Priscilla Oppenheimer http://www.priscilla.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=33976&t=33951 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
