3Com SSII roving analysis

I am having difficulty setting up an analysis port to monitor a fastethernet port on a 3Com SS II switch. Port 1 is a FE port that is configured for monitoring. Port 4 is configured as the analysis port. I am running ethereal on a laptop connected to the analysis port. Ethereal is monitoring in promiscuous mode. I see incoming broadcast traffic on port 1 but I never see the traffic generated on either ports

2 or 3 that should be leaving the switch via port 1 to an upstream switch. I see STP packets coming down the port 1 pipe, probably from the upstream switch, as well. Are there any gotchas to getting this to work?

Some pertinent information from the switch:

SuperStack II Switch 3900-36 (rev CA) - System ID a2050b

POV rev 1.06 SysBoot rev 1.08 ExtDiags rev 2.01

Flash Sysboot rev 1.08 Flash ExtDiags rev 2.01

Version 3.0.5-7 - Built 2001-01-30T09:47:19

Current system time: 2004-10-18T07:51:19

System up time: 4 Days 32 Minutes 15 Seconds

Time in Service: 1506 Days

System Name: SuperStack II Switch-A2050B

Chassis/TLA Part Number: 10010696

Product Board Serial Product Part Description Rev Number Number Number

------------------------------------------------------------------------------

10/100BaseTX M/B, 36 RJ45 ports AA 2KSL004465 3C39036 10011085

AP Memory Size : 8 MB

Flash Memory Size : 4 MB

Select menu option (ethernet): det Select Ethernet ports (1-39|all|?) [4]: 1

rxFrames rxBytes rxFrameRate

1116622 114325112 2

rxByteRate rxPeakFrameRate rxPeakByteRate

245 81 113137

noRxBuffers alignmentErrs fcsErrs

0 0 0

runts fragments jabbers

0 0 0

oversized rxInternalErrs rxUnicasts

0 0 111833

rxMulticasts rxMcastsOnly rxBroadcast

1004789 184082 820707

txFrames txBytes txFrameRate

40181 3669848 0

txByteRate txPeakFrameRate txPeakByteRate txQOverflows excessCollisions

0 0

txInternalErrs carrierSenseErr txDiscards

0 0 0

txUnicasts txMulticasts txMcastsOnly

24180 16001 2619

txBroadcasts singleCollisions multiCollisions

13382 0 0

lateCollisions requestedState

0 enabled

portLabel

portType

10/100BaseT(RJ45)

on-line enabled

macAddress autoNegMode autoNegState

00-80-3e-a2-05-0b enable completed

reqPortMode actualPortMode reqFlowControl

100full 100full off

actualFlowControl paceAccess

off disable

Select menu option (ethernet): det 4

rxFrames rxBytes rxFrameRate

357043 33945610 0

rxByteRate rxPeakFrameRate rxPeakByteRate

52 2 363

noRxBuffers alignmentErrs fcsErrs

0 0 0

runts fragments jabbers

0 0 0

oversized rxInternalErrs rxUnicasts

0 0 0

rxMulticasts rxMcastsOnly rxBroadcast

357043 1025 356018

txFrames txBytes txFrameRate

1064004 104794966 1

txByteRate txPeakFrameRate txPeakByteRate txQOverflows excessCollisions

0 0

txInternalErrs carrierSenseErr txDiscards

0 0 0

txUnicasts txMulticasts txMcastsOnly

114984 949022 174458

txBroadcasts singleCollisions multiCollisions

774564 0 0

lateCollisions requestedState

0 enabled

portLabel

portType

10/100BaseT(RJ45)

on-line enabled

macAddress autoNegMode autoNegState

00-80-3e-a2-05-0e enable completed

reqPortMode actualPortMode reqFlowControl

100full 100full off

actualFlowControl paceAccess

off disable

Select menu option (analyzer): disp Ports configured as analyzer ports:

Port Type Address

4 Fast Ethernet 00-80-3e-a2-05-0e

Ports being monitored:

Port Type Analyzer Address

1 Fast Ethernet 00-80-3e-a2-05-0e TIA

Larry

Reply to
gump33lt
Loading thread data ...

------------------------------------------------------------------------------

##-----------------------------------------------##

Article posted with Cabling-Design.com Newsgroup Archive

formatting link
no-spam read and post WWW interface to your favorite newsgroup -

comp.dcom.lans.ethernet, comp.dcom.net-analysis - messages and counting!

##-----------------------------------------------##

Reply to
odem48

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.