Priscilla, Oh I'm always much too promiscuous for my own good normally ;). I've checked that setting and from my end it seems to be on by default (checked and yes it is). I did some further work on this last night and I was eventually able to see some of the mirrored traffic. I didn't change anything from before, other than rebooting the switch before trying it once again.
I wonder though if I may be having some slight hardware problem though. I say that because I mirrored both router ports to the analyzer port initially and I did capture traffic from both at once. A bit later one of the two mirrored ports stopped mirroring, I noticed on the switch console a message regarding that port joining or leaving a bridge port, or something like that. The conversation between the routers continued, but the one stopped mirroring. I rebooted the switch again and still it would not work. Anyway, I think I've gotten the gist and will play with it later. I've always found it interesting how much better you learn things when they break, assuming you can eventually get them to work, otherwise it's a killer. This is a 5000 switch with a Sup III engine and an RSM module installed by the way. Thanks for the help. Rich ""Priscilla Oppenheimer"" wrote in message news:[EMAIL PROTECTED] > You don't need "inpkts enable" to see the mirrored traffic. > > In Ethereal, when you go to the Capture menu and select the adapter, make > sure you select "Capture packets in promiscuous mode." I think Ethereal > defaults to that being off. Their buttons are so ugly, it's hard to tell > which setting is on or off, in the version I'm using anyway. :-) (One reason > to use EtherPeek, i.e. for its great user interface.) So play around with > that. > > On Ethernet I haven't had any major problems with Ethereal, actually. On > wireless, to get Ethereal to capture at all I had to say capture not in > promiscuous mode. I couldn't get it to capture promisuously. I think that' s > a limitation of my wireless NIC, though. > > Anyway, I bet your problem is somewhere in the promiscuity area. Perhaps you > are just too moral! :-) > > Priscilla Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=64288&t=64186 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
