monitor session
To create a new Ethernet Switched Port Analyzer (SPAN) or a Remote Switched Port Analyzer (RSPAN)
session configuration for analyzing traffic between ports or add to an existing session configuration, use the
monitor session global configuration command. To clear SPAN or RSPAN sessions, use the no form of this
command.
monitor session session-number {destination | filter | source}
no monitor session {session-number [destination | filter | source] | all | local | range session-range | remote}
Syntax Description
session-number
Clears all monitor sessions.all
Clears all local monitor sessions.local
Clears monitor sessions in the specified range.
range session-range
Clears all remote monitor sessions.remote
Command Default
No monitor sessions are configured.
Command Modes
Global configuration
Command History
ModificationRelease
This command was introduced.Cisco IOS XE 3.3SECisco IOS XE 3.3SE
Usage Guidelines
You can verify your settings by entering the show monitor privileged EXEC command. You can display
SPAN, RSPAN, FSPAN, and FRSPAN configuration on the switch by entering the show running-config
privileged EXEC command. SPAN information appears near the end of the output.
Examples
This example shows how to create a local SPAN session 1 to monitor traffic on Po13 (an EtherChannel port)
and limit SPAN traffic in the session only to VLAN 1281. Egress traffic replicates the source; ingress forwarding
is not enabled.
Device(config)# monitor session 1 source interface Po13
Device(config)# monitor session 1 filter vlan 1281
Device(config)# monitor session 1 destination interface GigabitEthernet2/0/36 encapsulation
replicate
Device(config)# monitor session 1 destination interface GigabitEthernet3/0/36 encapsulation
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
503
monitor session