Hi there Can a captured packet be determined if it is Ingress or egress in relation to a switch if port mirroring was used to capture traffic? Thank you asked 18 Jun '15, 12:03  zerowire |
One Answer:
There is no way to see that in the capture file, as the same frame is ingress on the switch port where the frame enters the switch and egress where is leaves the switch. Unless you know the switch port mirroring configuration, you can't tell the difference. Regards answered 18 Jun '15, 13:03  Kurt Knochner ♦ |
