Monitoring traffic (With Wireshark)

Wireshark and monitoring session

1. Monitoring session

C2950(config)#monitor session 1 source interface fastethernet 0/2

!--- This configures interface Fast Ethernet 0/2 as source port.

C2950(config)#monitor session 1 destination interface fastethernet 0/3

!--- This configures interface Fast Ethernet 0/3 as destination port.

2. Capture filters

References:

Catalyst Switched Port Analyzer (SPAN) Configuration Example

http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml#topic5

Filtering while capturing

http://www.wireshark.org/docs/wsug_html_chunked/ChCapCaptureFilterSection.html