Hi, We have Extreme switches in our environment and I'm trying to capture FTP traffic between a copier on my network and a file server.
OK. Let's see if I Wireshark can pick up the FTP traffic natively from my laptop, with no port mirroring
OK. So it's not my config of Wireshark. It is picking up FTP traffic natively from my laptop. So let's mirror the port my laptop is in and try again
This leads me to believe that there is something about the mirroring process on my switches that is not sending FTP traffic to a mirrored port. I know not everyone has Extreme switches, but has anyone heard of such behavior in their own environments? Thanks for listening and I appreciate any help. Regards, Joe asked 23 Sep '15, 11:29 JoeyJoeJoe1970 |
One Answer:
well, then it's neither a problem with Wireshark nor a general problem with your port mirroring, so you should ask this question in a Extreme Networks forum, because your chances to get a usefull answer will be much higher. Regards answered 23 Sep '15, 13:05 Kurt Knochner ♦ |
Do you see any traffic on that mirrored port?
Hi Kurt.
Yes I see plenty of traffic coming through. Just no FTP protocol.