I am having difficulty setting up an analysis port to monitor a fastethernet port on a 3Com SS II switch. Port 1 is a FE port that is configured for monitoring. Port 4 is configured as the analysis port. I am running ethereal on a laptop connected to the analysis port. Ethereal is monitoring in promiscuous mode. I see incoming broadcast traffic on port 1 but I never see the traffic generated on either ports
2 or 3 that should be leaving the switch via port 1 to an upstream switch. I see STP packets coming down the port 1 pipe, probably from the upstream switch, as well. Are there any gotchas to getting this to work?
Some pertinent information from the switch:
SuperStack II Switch 3900-36 (rev CA) - System ID a2050b
POV rev 1.06 SysBoot rev 1.08 ExtDiags rev 2.01
Flash Sysboot rev 1.08 Flash ExtDiags rev 2.01
Version 3.0.5-7 - Built 2001-01-30T09:47:19
Current system time: 2004-10-18T07:51:19
System up time: 4 Days 32 Minutes 15 Seconds
Time in Service: 1506 Days
System Name: SuperStack II Switch-A2050B
Chassis/TLA Part Number: 10010696
Product Board Serial Product Part Description Rev Number Number Number
------------------------------------------------------------------------------
10/100BaseTX M/B, 36 RJ45 ports AA 2KSL004465 3C39036
10011085
AP Memory Size : 8 MB
Flash Memory Size : 4 MB
Select menu option (ethernet): det Select Ethernet ports (1-39|all|?) [4]: 1
rxFrames rxBytes rxFrameRate
1116622 114325112
2
rxByteRate rxPeakFrameRate rxPeakByteRate
245 81
113137
noRxBuffers alignmentErrs fcsErrs
0 0
0
runts fragments jabbers
0 0
0
oversized rxInternalErrs rxUnicasts
0 0
111833
rxMulticasts rxMcastsOnly rxBroadcast
1004789 184082
820707
txFrames txBytes txFrameRate
40181 3669848
0
txByteRate txPeakFrameRate txPeakByteRate txQOverflows excessCollisions
0 0
txInternalErrs carrierSenseErr txDiscards
0 0
0
txUnicasts txMulticasts txMcastsOnly
24180 16001
2619
txBroadcasts singleCollisions multiCollisions
13382 0
0
lateCollisions requestedState
0 enabled
portLabel
portType
10/100BaseT(RJ45)
on-line enabled
macAddress autoNegMode autoNegState
00-80-3e-a2-05-0b enable completed
reqPortMode actualPortMode reqFlowControl
100full 100full off
actualFlowControl paceAccess
off disable
Select menu option (ethernet): det 4
rxFrames rxBytes rxFrameRate
357043 33945610
0
rxByteRate rxPeakFrameRate rxPeakByteRate
52 2
363
noRxBuffers alignmentErrs fcsErrs
0 0
0
runts fragments jabbers
0 0
0
oversized rxInternalErrs rxUnicasts
0 0
0
rxMulticasts rxMcastsOnly rxBroadcast
357043 1025
356018
txFrames txBytes txFrameRate
1064004 104794966
1
txByteRate txPeakFrameRate txPeakByteRate txQOverflows excessCollisions
0 0
txInternalErrs carrierSenseErr txDiscards
0 0
0
txUnicasts txMulticasts txMcastsOnly
114984 949022
174458
txBroadcasts singleCollisions multiCollisions
774564 0
0
lateCollisions requestedState
0 enabled
portLabel
portType
10/100BaseT(RJ45)
on-line enabled
macAddress autoNegMode autoNegState
00-80-3e-a2-05-0e enable completed
reqPortMode actualPortMode reqFlowControl
100full 100full off
actualFlowControl paceAccess
off disable
Select menu option (analyzer): disp Ports configured as analyzer ports:
Port Type Address
4 Fast Ethernet 00-80-3e-a2-05-0e
Ports being monitored:
Port Type Analyzer Address
1 Fast Ethernet 00-80-3e-a2-05-0e TIA
Larry