Given the following output, on what interface would you expect to see mirrored traffic when using tcpdump?
Given the following output, on what interface would you expect to see mirrored traffic when using tcpdump?
In the given output, the monitor session 'Lab' shows that the source port is 'Et1' and the destination port is 'Cpu: active (mirror0)'. This indicates that the traffic from the 'Et1' interface is being mirrored to the 'mirror0' interface. To capture the mirrored traffic using tcpdump, you would need to use the 'mirror0' interface.
Answer is D; 7150S#bash tcpdump -i mirror0 tcpdump: WARNING: mirror0: no IPv4 address assigned tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on mirror0, link-type EN10MB (Ethernet), capture size 65535 bytes
It says source ports are Eth1. Destination is CPU (mirror0). The answer is not A or B or C.. it is D!