I may be mistaken and hopefully someone will quickly correct me if I'm wrong but....
Couldn't you just grab a capture, click on the header of the delta time column to be sure that the delat tiems are arranged in ascending or descending order numerically and then look for packets with matching delta times? if they appear then it's full duplex. If I recall correctly, a SPAN port show the delta time of the original traffic as it occurred, not the times that the packets went out the SPAN port to the Sniffer (a SPAN port can copy FD trafic frpom the backplane but can't send the traffic out as FD - it send it all as a half duplex stream but should preserve the original packet times in the trace file.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.