So I have a LAN that consists of several 3560 switches (which also acts as the gateway). I am trying to monitor the top talkers. I guess I can do this via port mirroring. So I mirror the port that goes to internet. My questions are,
1. What should be the destination for this port mirroring. If I forward this to the machine running PRTG, doesn't the PRTG system become unavailable. As the Cisco mirroring will make the IP of the PRTG server interface unreachable.
2. Can I have forward the mirrored traffic from the switch to a different interface of the server? Can PRTG read the traffic of the other NICs of the same server?
3. Last, once we get the traffic to the PRTG server, what needs to be done?
Vadi
Hallo,
use a second nic in the PRTG server and connect the mirroring port to it.
Then create a packet sniffing sensor on your probe device, selecting the NIC the mirror port is connected to.
If you need to do this with several switches in different locations, you could use remote probes to connect the mirror ports to.
https://www.paessler.com/manuals/prtg9/remote_probes_and_multiple_probes.htm
Mar, 2012 - Permalink