LACP port(per s3 one physcal port) mirror one physical port (s3 with VSB) tcp session incomplete

  • 0
  • 1
  • Problem
  • Updated 2 years ago
  • Not a Problem
  • (Edited)
My customer want to mirror lag port to PA.
there are two s3 using VSB.
command :

>set port lacp port tg.1.27 aadminkey 27 enable 
>set port lacp port tg.4.27 aadminkey 27 enable
>set lacp aadminkey lag.0.27 27

>set port mirror create lag.0.27 tg.1.23 both
>set port mirror rnable lag.0.27 tg.1.23 

>show port mirroring Port MirroringPort Mirroring Configuration

==============
Source Port        = lag.0.27vtap.0.5
Target Port         = tg.1.23ge.1.1
 Frames Mirrored    = Rx and Tx
Admin Status       = enabled
Operational Status = enabled
Mirror Outbound Rate Limited Frames : Disabled
============== 

we use wireshark and paloalto to monitor tg.1.23
we only find Tx  Frames
we can't find Rx  Frames

like this :

 tcp  seesion incomplete



who can help me ?
Photo of An-Tin Liu

An-Tin Liu

  • 478 Points 250 badge 2x thumb
  • confuse

Posted 2 years ago

  • 0
  • 1
Photo of Alex Morrissey

Alex Morrissey, Employee

  • 862 Points 500 badge 2x thumb
Hello,

This condition is usually seen when there are other mirrors already capturing the traffic or if the traffic is unidirectional.  Are there any other mirrors configured on the switch including policy mirrors applied to this port or on any other port the traffic would traverse?  Also you mentioned Tx and RX.  Is that in relation to lag.0.27?

- Alex
Photo of Daniel Coughlin

Daniel Coughlin, Employee

  • 2,702 Points 2k badge 2x thumb
An-Tin Liu,

Any luck with this?  We are here to help you with this.