Kim, Without a doubt a more practical way to capture traffic on a present day network would be by using one of the spanning technics mentioned.
The point here really though is that somebody asked for the syntax of a command, and they got the help they were looking for. in a production enviroment, you probably would not want to look towards implementing the process switching technique for multiple reasons, which i'm sure you can find on www.cisco.com :). -- Regards, Jason Plank CCIE #16560 e: [EMAIL PROTECTED] -------------- Original message ---------------------- From: Gert Doering <[EMAIL PROTECTED]> blah blah blah blah
--- Begin Message ---Hi, On Sat, Jan 12, 2008 at 03:21:09AM +0200, Kim Onnel wrote: > if we are talking about hardware switching platforms then i believe it makes > sense that it will only sniff process switched traffic, so why is it useless > then? If you have process switched traffic, something is wrong with your network setup. Some features just plain do not work without CEF (like "MPLS"), others are horribly slow or cause insane amount of CPU load. > IMHO, it is very difficult to design a router that will capture traffic > being hardware switched, am i correct? SPAN/RSPAN/ERSPAN exit and work very well :-) gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany [EMAIL PROTECTED] fax: +49-89-35655025 [EMAIL PROTECTED]
pgp9JmXEFTthi.pgp
Description: PGP signature
--- End Message ---
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
