We have a number of core switches and are using a remote span vlan to bring packets from any port to our packet capture device. The good thing is it works, but the drawback is that unless I log into every one of the switches and do the show monitor command, I can't be sure I'm only getting packets from the source switch port I want them from. Here's what the show monitor looks like from a 4510 switch;
Session 1
---------
Type : Remote Source Session
Source Ports :
Both : Gi3/27
Filter Pkt Type :
RX Only : Good
Dest RSPAN VLAN : 99
Does anyone know a way to display it on the Node Details page or the Interface Details produce an NPM Report or use a UnDP or any other method to show that info?