Revision history [back]

I recently set up a span port on a Cisco network switch to get a capture of all the traffic. Unfortunately there is traffic on the network which isn’t being detected and recorded by wireshark.

As all the end devices on the switch are within the same network subnet, I set my laptop which had wireshark installed to an unused ip address within the same network range. Was this the correct thing to do on a span port?

I can’t think of any other reason why I’m not seeing all the traffic

I recently set up a span port on a Cisco network switch to get a capture of all the traffic. Unfortunately there is traffic on the network which isn’t being detected and recorded by wireshark.

As all the end devices on the switch are within the same network subnet, I set my laptop which had wireshark installed to an unused ip address within the same network range. Was this the correct thing to do on a span port?

I can’t think of any other reason why I’m not seeing all the traffic