0

I am currently doing packet capture through mirroring with Wireshark as mentioned in this post

I can mirror the traffic to a port physically jacked into and analyze the packets redirected there w/ Wireshark. How can I, if possible, transport that traffic to a laptop or a remote device?

Frankie Guzikowski
  • 3
  • 2

1 Answers1

1

What you're looking for is called RSPAN - Remote Switch Port ANalyzer. RSPAN copies frames from a monitored port into a (dedicated) VLAN which you connect to the monitoring station.

  1. Set up a VLAN between the monitored switch and the monitoring station.
  2. Configure RSPAN from the monitored port into the RSPAN VLAN.

I found a detailed description for Brocade here.

Zac67
  • 81,287
  • 3
  • 67
  • 131
  • 1
    I do not know about Brocade, but Cisco also has ERSPAN that will actually route the traffic to a remote site, so you do not need a VLAN to span sites. – Ron Maupin Oct 09 '20 at 14:49