MS as a traffic Sensor

k-oppata
Comes here often

MS as a traffic Sensor

I'd like to analyze our traffic with MS switch, though no traffic disruption is allowed to swap our switch to MS.

So I think, if our switch mirrors(SPAN) traffics to a new MS, I could analyze those traffics on the Dashboard.

Question is, MS can recognize those mirrored packet as same as usual traffic?

 

Thanks in advance.

5 Replies 5
GIdenJoe
Kind of a big deal
Kind of a big deal

Your existing switch will just spew the frames out it's mirror port and those frames will be received by the MS switch.  So if you want to receive those frames you will also have to set a mirror port on the MS switch and connect your analyser on that port.

k-oppata
Comes here often

Thank you, GldnJoe.

My intension is to analyze traffic not by an analyzer, but by MS itself.

GIdenJoe
Kind of a big deal
Kind of a big deal

It's a switch, not a network analyser 😉  You need a host to the capturing.
Agreed there are cloud captures now but these are short in duration.

Continuous captures always require mirroring to a device dedicated for the capture.

cmr
Kind of a big deal
Kind of a big deal

If the traffic is all being sent to the MS switch, then in theory it should start analysing it and you should get an idea of what it would look like if used as the main switch, although obviously you'll just see it all on one port as a big lump...

If my answer solves your problem please click Accept as Solution so others can benefit from it.
k-oppata
Comes here often

Thank you, cmr.

Is it unnecessary that MS forwards the traffics to another port?

To say, just receiving the traffic is enough to analyze it?

Get notified when there are additional replies to this discussion.