Monitor ports

[V98Cubes]

I have a monitor session setup on a copper port looking at all my vlan's configured within my 6509. Is there any particular vlan my siffer needs to setup for or can I just setup up the destination port with a single switchport command and assign the pc a static vlan 1 ip address. I do not use vlan 1 within the the switch is it currently shutdown. Does this make any differance in the results I would see in my data capture?

Thanks,
V98cubes

 

[SweetRevelation]

If you have a sniffer plugged in the port does not work as a normal port, so whatever port you set as the destination for your monitor session will not pass normal traffic. Therefore the vlan and the ip address of the sniffer dont' matter at all since it won't be able to communicate, it will just see traffic pushed at it from the switch.

monitor session x source interface x
monitor session x destination interface x

That destination interface is what I'm talking about, while mirroring other ports it will not function as a normal port, don't expect to access the network from that port while you're sniffing on it.