HI This may be over-simplifying the situation but you need to check out the software configuration manual for the 2950 switch. I noted in the lab when using these that the facilities in the 2950 are different from older catalyst switches. If memory serves correct I think they are limited to monitoring only one VLAN and they can only monitor ingress traffic to a port not outgress (Cisco terms for traffic in and out). I have these in my network lab and the issues of the changes to SPAN have cause problems. I suggest a google on the configuration you need, you will probably find a Cisco cite link that explains full config.
Rick -----Original Message----- From: Richard Pawly [mailto:[EMAIL PROTECTED] Sent: 03 March 2004 22:23 To: ethereal-users Subject: [Ethereal-users] Capture on Cisco 2950 and WinXP with 2 NIC Cards I have a computer on a Cisco 2950 that has 2 nic cards 1 for network connectivity and 1 connected to an additional switch port that is setup for monitoring. This NIC has no subnet, no gateway, no ip address, and no dns addys. When I try to put host xxx.xxx.xxx.xxx in the capture filter I get nothing in the way of packets displayed. When I erase that capture filter and then start with none and then put a ip.addr == xxx.xxx.xxx.xxx in the filter of the main window I get the packets just fine. I have also just tried giving the 2nd nic (set up for monitoring in the switch) a ip address gateway and subnet, and when I put host xxx.xxx.xxx.xxx in the caputre field I get only arp messages asking where the xxx.xxx.xxx.xxx is and to notify the 2nd nics address. Before we had a rag tag of diffent switches installed and it was never a problem worked great but since the installation of the Cisco 2950s this has been a issue. Please help. Thanks Rich _______________________________________________ Ethereal-users mailing list [EMAIL PROTECTED] http://www.ethereal.com/mailman/listinfo/ethereal-users -- This message has been scanned for viruses and dangerous content by the NorMAN MailScanner Service and is believed to be clean. The NorMAN MailScanner Service is operated by Information, Systems and Services, University of Newcastle upon Tyne. _______________________________________________ Ethereal-users mailing list [EMAIL PROTECTED] http://www.ethereal.com/mailman/listinfo/ethereal-users
