Ethereal-users: [Ethereal-users] Using Ethereal with Cisco SPAN

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Rudd Gates" <ruddg@xxxxxxxxxxxxx>
Date: Fri, 20 Sep 2002 10:02:29 -0600
Title: Message
Hello,
 
I have been trying to capture SPAN forwarded traffic with Ethereal to no avail (I actually see LESS traffic when I am capturing on a SPAN destination port than when I am just watching normal broadcasts, etc., in operational mode on a Catalyst 2950).  I am quite certain that I have configured the switch appropriately, but I am completely new to Ethereal and haven't seen any documentation relating to this subject.  I am capturing on a Compaq/WinXP system with Ethereal 0.9.6 & WinPCap 2.3.
 
Has anyone successfully worked with Cisco's SPAN feature and Ethereal?  Thanks for any tips!
 
Rudd