Port mirroring Cisco switches

To mirror a port i.e. pass traffic to another port so that it can be analised is different per Cisco switch but the basis is

Create a monitoring group

Tell one or more of the ports that it is the source

Tell one port that it is the destination.

Becareful here as this can increase load on the switch.


The command are as follows:

Cisco 2950

monitor session 1 source interface x/x both
monitor session 1 destination interface x/x


This puts the switch into monitoring mode, you can have more than 1 session also

To show what is being monitored

show monitor

To stop monitoring of 1 session or turn off completley

no monitor session x

no monitor



Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s