hello everyone
we have a switch core aruba 2930F and we have 3 VLAN, I analyse the traffic of network and we have a mirror port for this process, I conect a machinge whit wireshark and in the analysis we have a lost of pachet.
is there any way to know why i have this packet loss
In general a mirror port gets the lowest priority in the switching silicon, to not inhibit the performance of the traffic ports. With that in mind, if all traffic crossing interfaces is mirrored to the monitor port it is easily flooded, which is resolved by, you guessed it, dropping frames. So in order to avoid that, the monitoring setup is very important. ingress / egress / span / vlan are all potential parameters which could be tuned, but this depends very much on the specifics of this switch. For that Aruba support forums, assuming these exist, are probably a better resource.
Asked: 2020-10-13 20:26:09 +0000
Seen: 571 times
Last updated: Oct 13 '20
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
