We've currently got a mini-6 and a NUC with two ethernet interfaces at a customers house to monitor the connection between their router and their CPE. They've been experiencing a strange issue where their router seems to be losing it's ip lease every 30 minutes or so. They work fine on a second connection they have. So we installed an active wireshark capture to try and figure out what's going on.
One strange thing we're seeing is, about 95% of the packets are being appended with a "VSS Monitoring Ethernet Trailer" to the end of them. My question is merely if there's a chance the Netonix is doing this as part of the mirroring, or how it forwards packets in anyway? Working on any possible theories, so figured we would ask.
Mini-6 port mirror strange packet appendage
-
sirhc - Employee
- Posts: 7415
- Joined: Tue Apr 08, 2014 3:48 pm
- Location: Lancaster, PA
- Has thanked: 1608 times
- Been thanked: 1325 times
Re: Mini-6 port mirror strange packet appendage
What firmware version is this and you are mirroring to a port?
Support is handled on the Forums not in Emails and PMs.
Before you ask a question use the Search function to see it has been answered before.
To do an Advanced Search click the magnifying glass in the Search Box.
To upload pictures click the Upload attachment link below the BLUE SUBMIT BUTTON.
Before you ask a question use the Search function to see it has been answered before.
To do an Advanced Search click the magnifying glass in the Search Box.
To upload pictures click the Upload attachment link below the BLUE SUBMIT BUTTON.
-
Eric Stern - Employee
- Posts: 532
- Joined: Wed Apr 09, 2014 9:41 pm
- Location: Toronto, Ontario
- Has thanked: 0 time
- Been thanked: 130 times
-
taytrho - Member
- Posts: 14
- Joined: Fri Jul 17, 2015 3:40 pm
- Location: PROVO, UT
- Has thanked: 4 times
- Been thanked: 3 times
Re: Mini-6 port mirror strange packet appendage
Eric Stern wrote:Likely a wireshark bug/issue. http://marc.info/?l=wireshark-bugs&m=13 ... 418327&w=2
Could be a possiblity. Perhaps just a weird way the cent os system is handling the packets and/or the dumpcap recording them. We'll read more into this.
sirhc wrote:What firmware version is this and you are mirroring to a port?
Firmware 1.3.9. Mirroring port 6 to "destination" port 2.
4 posts
Page 1 of 1
Who is online
Users browsing this forum: No registered users and 38 guests