First of all, sorry about bit clunky title. Tried to make it as informational as possible. I have a following topology in GNS3: "SW" is a Cisco 3640 router with NM-16ESW 16-port 10/100 EtherSwitch Network Module. Port Fa0/0 of "SW" is an access port in VLAN 5. I have mirrored both Rx and Tx traffic of port Fa0/0 to port Fa0/10:
There is a Debian VM running Wireshark 1.2.11 listening on eth2 interface which is bridged with tap0 interface in Virtualbox configuration. VM eth2 interface is connected to port Fa0/10. Now if I telnet to “router” from “R1”:
..I expect to see ARP, ICMP and IP traffic in Wireshark output. However, I capture only SPT and CDP traffic: Any ideas what might cause this? asked 18 Feb ‘13, 15:13 mrtn |
One Answer:
within GNS3 you can capture traffic directly on the network connections (If Wireshark is installed on your GNS3 'host'). To figure out if the SPAN port works, capture traffic on Fa0/10 in GNS3. Select the connection, then right click and choose "capture". See here: http://www.youtube.com/watch?v=4JMPia7jW2U
Regards answered 19 Feb '13, 08:28 Kurt Knochner ♦ edited 19 Feb '13, 08:31 |