{"id":755,"date":"2020-06-28T19:57:01","date_gmt":"2020-06-28T11:57:01","guid":{"rendered":"https:\/\/www.insecurewire.com\/?p=755"},"modified":"2020-06-28T19:57:01","modified_gmt":"2020-06-28T11:57:01","slug":"setting-up-a-linux-network-probe-with-cisco-rspan","status":"publish","type":"post","link":"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/","title":{"rendered":"Setting up a Linux Network Probe with Cisco RSPAN"},"content":{"rendered":"<p>In this tutorial I will go over the steps to setup an Ubuntu network probe hosted on a VMware ESXi server utilising Cisco Remote Switchport Analyser (RSPAN).<br \/>\n<a href=\"https:\/\/www.insecurewire.com\/wp-content\/uploads\/2020\/06\/RSPAN-Topology.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.insecurewi.re\/wp-content\/themes\/breek\/assets\/images\/transparent.gif\" data-lazy=\"true\" data-src=\"https:\/\/www.insecurewire.com\/wp-content\/uploads\/2020\/06\/RSPAN-Topology-1024x188.png\" alt=\"RSPAN Topology\" width=\"720\" height=\"132\" class=\"aligncenter size-large wp-image-761\" data-srcset=\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology-1024x188.png 1024w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology-300x55.png 300w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology-768x141.png 768w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology-100x18.png 100w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology-700x128.png 700w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology.png 1287w\" data-sizes=\"auto, (max-width: 720px) 100vw, 720px\" \/><\/a><br \/>\nLets break down the components:<br \/>\n<strong>Switch <\/strong>&#8211; Cisco Catalyst L3 switch with RSPAN configured. In this example we span the WAN uplink interface to the RSPAN VLAN.<br \/>\n<strong>Hypervisor<\/strong> &#8211; VMware ESXi and vSwitch with 2 portgroups, one for mgmt and one for rspan.<br \/>\n<strong>Virtual Machine <\/strong>&#8211; Ubuntu Server (can be any version really). We need two VMXnet3 network adapters &#8211; one for management of the VM and one for the RSPAN.<\/p>\n<p>The network is a collapsed core with a layer 3 routed uplink to the WAN circuit. The purpose of remote spanning the wan uplink is to be able to analyse the traffic in the VMware environment. RSPAN allows you to analyse traffic anywhere in the network that a L2 VLAN can exist. This allows troubleshooting to be mobile. SPAN is quite simply a copy of the traffic, so it is important to note that if you use SPAN you need to make sure your doing it on a platform that can support the load. For example I have done this on both Cisco Nexus and Dell Force 10 hardware for 100mbit WAN circuit in production and had no issue. It is best to lab a technology such as SPAN first before putting it into production. This allows you to get used to it and understand how it works. SPAN requires the actual switch ASIC hardware so you can&#8217;t run this with GNS3 or CML, it needs to be physical kit.<\/p>\n<p><strong>Switch<\/strong><br \/>\n1. Below is the switch configuration (Cisco Catalyst IOS-XE syntax):<br \/>\n<code>CORE-SW(config)#vlan 901<br \/>\nCORE-SW(config-vlan)#remote-span<br \/>\nCORE-SW(config-vlan)#exit<br \/>\nCORE-SW(config)#<br \/>\nCORE-SW(config)#monitor session 1 source interface Gi0\/3<br \/>\nCORE-SW(config)#monitor session 1 destination remote vlan 901<br \/>\nCORE-SW(config)#wr<br \/>\nCORE-SW(config)#exit<br \/>\n<\/code><br \/>\n2. Ok so what have we done here? Configured vlan 901 as rspan and set the monitor session up with source interface of our WAN uplink (Gi0\/3). By default both tx and rx are included on the monitor session CLI commands unless you specify one or the other. So we will get both directions of traffic from source interface Gi0\/3.<\/p>\n<p><strong>Hypervior<\/strong><br \/>\n1. Configure the ESXi vSwitch port groups. One for the mgmt with standard settings, including vlan tag if the port is a trunk. Configure an RSPAN port group and set the RSPAN VLAN tag of 901, which we configured on the Cisco Switch previously.<br \/>\n2. Go to the properties of the RSPAN port group and security tab. Enable accept for Promiscous Mode, MAC Address Changes and Forged Transmits. This is depicted below:<br \/>\n<a href=\"https:\/\/www.insecurewire.com\/wp-content\/uploads\/2020\/06\/port-group-security.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.insecurewi.re\/wp-content\/themes\/breek\/assets\/images\/transparent.gif\" data-lazy=\"true\" data-src=\"https:\/\/www.insecurewire.com\/wp-content\/uploads\/2020\/06\/port-group-security.png\" alt=\"vPG-RSPAN\" width=\"1053\" height=\"620\" class=\"aligncenter size-full wp-image-756\" data-srcset=\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/port-group-security.png 1053w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/port-group-security-300x177.png 300w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/port-group-security-1024x603.png 1024w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/port-group-security-768x452.png 768w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/port-group-security-100x59.png 100w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/port-group-security-700x412.png 700w\" data-sizes=\"auto, (max-width: 1053px) 100vw, 1053px\" \/><\/a><\/p>\n<p><strong>Virtual Machine<\/strong><br \/>\n1. Download Ubuntu Server ISO and build a VM. Specs of 2vCPU, 4gb memory, 80gb disk, 2x VMXnet3 network adapters. Set one adapter to mgmt port group and the other to RSPAN port group.<br \/>\n2. Install Ubuntu Server, follow the wizard and do post install. Set your management IP on the mgmt network interface.<br \/>\n3. Upon post install, do a sudo apt update and sudo apt upgrade. Install iptraf-ng and tshark from apt.<br \/>\n<code>administrator@tawnos:~$ sudo apt install iptraf-ng<br \/>\nadministrator@tawnos:~$ sudo apt install tshark<\/code><\/p>\n<p><strong>Analysis with IPtraf-ng and Tshark<\/strong><br \/>\nNow we can view the top traffic in out of our network with iptraf-ng:<br \/>\n<code>administrator@tawnos:~$sudo iptraf-ng<\/code><br \/>\nSelect Configure and set Force promiscuous mode to On.<br \/>\nNow select Exit Configuration.<br \/>\nYou have both the ability to use IP Traffic Monitor or Detailed Interface Statistics. Select IP traffic monitor > ens192 (or your rspan interface). Use the keys &#8216;S&#8217; and &#8216;B&#8217; to sort traffic by byte count. As a Network Engineer Iptraf makes it really easy to see which IP is chewing up all the bandwidth.<br \/>\n<a href=\"https:\/\/www.insecurewire.com\/wp-content\/uploads\/2020\/06\/iptraf-ng.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.insecurewi.re\/wp-content\/themes\/breek\/assets\/images\/transparent.gif\" data-lazy=\"true\" data-src=\"https:\/\/www.insecurewire.com\/wp-content\/uploads\/2020\/06\/iptraf-ng.png\" alt=\"\" width=\"735\" height=\"390\" class=\"aligncenter size-full wp-image-780\" data-srcset=\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/iptraf-ng.png 735w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/iptraf-ng-300x159.png 300w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/iptraf-ng-100x53.png 100w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/iptraf-ng-700x371.png 700w\" data-sizes=\"auto, (max-width: 735px) 100vw, 735px\" \/><\/a><br \/>\n<a href=\"https:\/\/www.insecurewire.com\/wp-content\/uploads\/2020\/06\/iptraf-output.jpg\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.insecurewi.re\/wp-content\/themes\/breek\/assets\/images\/transparent.gif\" data-lazy=\"true\" data-src=\"https:\/\/www.insecurewire.com\/wp-content\/uploads\/2020\/06\/iptraf-output.jpg\" alt=\"IPtraf-Output\" width=\"598\" height=\"361\" class=\"aligncenter size-full wp-image-764\" data-srcset=\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/iptraf-output.jpg 598w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/iptraf-output-300x181.jpg 300w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/iptraf-output-100x60.jpg 100w\" data-sizes=\"auto, (max-width: 598px) 100vw, 598px\" \/><\/a><\/p>\n<p>We can also do the same with tshark. Lets say for example we want to capture packets to and from a host IP:<br \/>\n<code>administrator@tawnos:~$mkdir captures<br \/>\nadministrator@tawnos:~$sudo chown root:root captures\/<br \/>\nadministrator@tawnos:~$cd captures\/<br \/>\nadministrator@tawnos:~$sudo tshark -i 2 -f \"host 10.2.0.10\" -w test.pcap<\/code><\/p>\n<p>Now generate traffic between the host and the WAN circuit, or if your troubleshooting just wait for the packets to collect. In this example we are going to do a DNS lookup to a remote server 10.2.0.10 for google.com. Lets view the capture now with tshark and grep the remote server:<br \/>\n<code>administrator@tawnos:~$sudo tshark -r test.pcap | grep 10.2.0.10<\/code><br \/>\n<a href=\"https:\/\/www.insecurewire.com\/wp-content\/uploads\/2020\/06\/tshark-grep.png\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.insecurewi.re\/wp-content\/themes\/breek\/assets\/images\/transparent.gif\" data-lazy=\"true\" data-src=\"https:\/\/www.insecurewire.com\/wp-content\/uploads\/2020\/06\/tshark-grep.png\" alt=\"Tshark Grep\" width=\"1053\" height=\"60\" class=\"aligncenter size-full wp-image-763\" data-srcset=\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/tshark-grep.png 1053w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/tshark-grep-300x17.png 300w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/tshark-grep-1024x58.png 1024w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/tshark-grep-768x44.png 768w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/tshark-grep-100x6.png 100w, https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/tshark-grep-700x40.png 700w\" data-sizes=\"auto, (max-width: 1053px) 100vw, 1053px\" \/><\/a><br \/>\nSweet, it works. I hope this tutorial has assisted you to build your own Linux probe with RSPAN.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this tutorial I will go over the steps to setup an Ubuntu network probe hosted on a VMware ESXi server utilising Cisco Remote Switchport&#8230;<\/p>\n","protected":false},"author":2,"featured_media":761,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[24,31,4,12,17],"tags":[64,67,127,159,165],"class_list":["post-755","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cisco","category-linux","category-networking","category-switching","category-vmware","tag-catalyst","tag-cisco","tag-linux","tag-rspan","tag-span"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Setting up a Linux Network Probe with Cisco RSPAN - Insecure Wire<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Setting up a Linux Network Probe with Cisco RSPAN - Insecure Wire\" \/>\n<meta property=\"og:description\" content=\"In this tutorial I will go over the steps to setup an Ubuntu network probe hosted on a VMware ESXi server utilising Cisco Remote Switchport...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/\" \/>\n<meta property=\"og:site_name\" content=\"Insecure Wire\" \/>\n<meta property=\"article:published_time\" content=\"2020-06-28T11:57:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1287\" \/>\n\t<meta property=\"og:image:height\" content=\"236\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"nikonau\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/insecurewire\" \/>\n<meta name=\"twitter:site\" content=\"@insecurewire\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"nikonau\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/\"},\"author\":{\"name\":\"nikonau\",\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/person\/8ba08b41fc754b971a948ead6ccb777d\"},\"headline\":\"Setting up a Linux Network Probe with Cisco RSPAN\",\"datePublished\":\"2020-06-28T11:57:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/\"},\"wordCount\":663,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.insecurewi.re\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology.png\",\"keywords\":[\"Catalyst\",\"Cisco\",\"Linux\",\"RSPAN\",\"SPAN\"],\"articleSection\":[\"Cisco\",\"Linux\",\"Networking\",\"Switching\",\"VMware\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/\",\"url\":\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/\",\"name\":\"Setting up a Linux Network Probe with Cisco RSPAN - Insecure Wire\",\"isPartOf\":{\"@id\":\"https:\/\/www.insecurewi.re\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology.png\",\"datePublished\":\"2020-06-28T11:57:01+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#primaryimage\",\"url\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology.png\",\"contentUrl\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology.png\",\"width\":1287,\"height\":236,\"caption\":\"RSPAN Topology\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.insecurewi.re\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Setting up a Linux Network Probe with Cisco RSPAN\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.insecurewi.re\/#website\",\"url\":\"https:\/\/www.insecurewi.re\/\",\"name\":\"Insecure Wire\",\"description\":\"A Network Engineer\u2019s Perspective.\",\"publisher\":{\"@id\":\"https:\/\/www.insecurewi.re\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.insecurewi.re\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.insecurewi.re\/#organization\",\"name\":\"Insecure Wire\",\"url\":\"https:\/\/www.insecurewi.re\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2023\/10\/cloud.png\",\"contentUrl\":\"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2023\/10\/cloud.png\",\"width\":32,\"height\":32,\"caption\":\"Insecure Wire\"},\"image\":{\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/insecurewire\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/person\/8ba08b41fc754b971a948ead6ccb777d\",\"name\":\"nikonau\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.insecurewi.re\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2d1b9d9dc90da4f6d3da31b870f418c6b3553ba9be48d53e8ee3a35b0adb1d35?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2d1b9d9dc90da4f6d3da31b870f418c6b3553ba9be48d53e8ee3a35b0adb1d35?s=96&d=mm&r=g\",\"caption\":\"nikonau\"},\"sameAs\":[\"https:\/\/x.com\/https:\/\/twitter.com\/insecurewire\"],\"url\":\"https:\/\/www.insecurewi.re\/index.php\/author\/nikon\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Setting up a Linux Network Probe with Cisco RSPAN - Insecure Wire","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/","og_locale":"en_US","og_type":"article","og_title":"Setting up a Linux Network Probe with Cisco RSPAN - Insecure Wire","og_description":"In this tutorial I will go over the steps to setup an Ubuntu network probe hosted on a VMware ESXi server utilising Cisco Remote Switchport...","og_url":"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/","og_site_name":"Insecure Wire","article_published_time":"2020-06-28T11:57:01+00:00","og_image":[{"width":1287,"height":236,"url":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology.png","type":"image\/png"}],"author":"nikonau","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/insecurewire","twitter_site":"@insecurewire","twitter_misc":{"Written by":"nikonau","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#article","isPartOf":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/"},"author":{"name":"nikonau","@id":"https:\/\/www.insecurewi.re\/#\/schema\/person\/8ba08b41fc754b971a948ead6ccb777d"},"headline":"Setting up a Linux Network Probe with Cisco RSPAN","datePublished":"2020-06-28T11:57:01+00:00","mainEntityOfPage":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/"},"wordCount":663,"commentCount":0,"publisher":{"@id":"https:\/\/www.insecurewi.re\/#organization"},"image":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#primaryimage"},"thumbnailUrl":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology.png","keywords":["Catalyst","Cisco","Linux","RSPAN","SPAN"],"articleSection":["Cisco","Linux","Networking","Switching","VMware"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/","url":"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/","name":"Setting up a Linux Network Probe with Cisco RSPAN - Insecure Wire","isPartOf":{"@id":"https:\/\/www.insecurewi.re\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#primaryimage"},"image":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#primaryimage"},"thumbnailUrl":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology.png","datePublished":"2020-06-28T11:57:01+00:00","breadcrumb":{"@id":"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#primaryimage","url":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology.png","contentUrl":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2020\/06\/RSPAN-Topology.png","width":1287,"height":236,"caption":"RSPAN Topology"},{"@type":"BreadcrumbList","@id":"https:\/\/www.insecurewi.re\/index.php\/2020\/06\/28\/setting-up-a-linux-network-probe-with-cisco-rspan\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.insecurewi.re\/"},{"@type":"ListItem","position":2,"name":"Setting up a Linux Network Probe with Cisco RSPAN"}]},{"@type":"WebSite","@id":"https:\/\/www.insecurewi.re\/#website","url":"https:\/\/www.insecurewi.re\/","name":"Insecure Wire","description":"A Network Engineer\u2019s Perspective.","publisher":{"@id":"https:\/\/www.insecurewi.re\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.insecurewi.re\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.insecurewi.re\/#organization","name":"Insecure Wire","url":"https:\/\/www.insecurewi.re\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.insecurewi.re\/#\/schema\/logo\/image\/","url":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2023\/10\/cloud.png","contentUrl":"https:\/\/www.insecurewi.re\/wp-content\/uploads\/2023\/10\/cloud.png","width":32,"height":32,"caption":"Insecure Wire"},"image":{"@id":"https:\/\/www.insecurewi.re\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/insecurewire"]},{"@type":"Person","@id":"https:\/\/www.insecurewi.re\/#\/schema\/person\/8ba08b41fc754b971a948ead6ccb777d","name":"nikonau","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.insecurewi.re\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/2d1b9d9dc90da4f6d3da31b870f418c6b3553ba9be48d53e8ee3a35b0adb1d35?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2d1b9d9dc90da4f6d3da31b870f418c6b3553ba9be48d53e8ee3a35b0adb1d35?s=96&d=mm&r=g","caption":"nikonau"},"sameAs":["https:\/\/x.com\/https:\/\/twitter.com\/insecurewire"],"url":"https:\/\/www.insecurewi.re\/index.php\/author\/nikon\/"}]}},"_links":{"self":[{"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/posts\/755","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/comments?post=755"}],"version-history":[{"count":0,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/posts\/755\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/media\/761"}],"wp:attachment":[{"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/media?parent=755"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/categories?post=755"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.insecurewi.re\/index.php\/wp-json\/wp\/v2\/tags?post=755"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}