Switch#show running-config
Building configuration...
Current configuration : 1366 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Switch
!
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
!
!
!
!
no file verify auto
!
spanning-tree mode pvst
spanning-tree extend system-id
no spanning-tree vlan 1-4094
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
login
line vty 5 15
login
!
!
monitor session 1 source interface Fa0/1 - 12
monitor session 1 destination interface Fa0/13 - 24
end
Switch#conf ter
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#monitor session 1 destination interface Fa0/13 - 24 ?
, Specify another range of interfaces
encapsulation Set encapsulation for destination interface
ingress Enable ingress traffic forwarding
Switch(config)#monitor session 1 destination interface Fa0/13 - 24 ingr
Switch(config)#monitor session 1 destination interface Fa0/13 - 24 ingress ?
dot1q ingress forwarding using dot1q encapsulation
untagged ingress forwarding using untagged encapsulation
vlan Set default VLAN for untagged ingress traffic
Switch(config)#monitor session 1 destination interface Fa0/13 - 24 en
Switch(config)#$sion 1 destination interface Fa0/13 - 24 encapsulation ?
dot1q interface uses only dot1q encapsulation
replicate interface replicates source encapsulation
Switch(config)#
Switch(config)#monitor session 1 source interface Fa0/1 - 12 ?
, Specify another range of interfaces
both Monitor received and transmitted traffic
rx Monitor received traffic only
tx Monitor transmitted traffic only
Switch(config)#
Switch(config)#
Switch(config)#
注:
monitor session 1 source interface Fa0/1 - 12 配置端口Fa0/1至Fa0/1
2为本地镜像组1的镜像源端口，并且对这十二个端口接收的报文进行镜像,将被监控的电脑用网线连接至这十二个端口中任何端口
monitor session 1 destination interface Fa0/13 - 24 配置端口Fa0/13至Fa0/24为本地镜像组1的镜像目的端口,将安装Wireshark软件的电脑用网线连接至该端口，开始监控数据流量