Wireshark-users: [Wireshark-users] Can Wireshark differentiate between multiple Cisco SPAN source
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: <Marty.Gramlick@xxxxxxxxxxxxxxx>
Date: Thu, 5 Sep 2013 17:48:03 +0000
I'm running a SPAN on a Cisco Nexus FEX 2248.  The 4 ports I want to look at are on the same VLAN and the same FEX switch.  Due to limitations with the Cisco hardware, they must all be part of the same monitor session.  In other words I was hoping to SPAN each one individually, but in order to look at all of them they need to be in the same monitor session therefore they are going to 1 NIC on the Wireshark server.  Is there anything embedded or anyway for Wireshark to resplit the traffic back into 4 separate traffic streams?

Thanks,
MARTY GRAMLICK
Senior Network Engineer, Specialist
The University of Chicago Medicine