ā02-28-2018 09:05 AM
ā10-15-2020 02:31 PM
Just a short like what the cisco guys do ā¦
They support truncation:
Configures the MTU size for truncation.
AnySPAN packet that is larger than the configured mtu size is truncated to the configured size with a 4-byte offset.
ā10-15-2020 02:28 PM
Working more and more with that feature - very powerfull!
But what about if the packet which needs to be mirrored is at maximum mtu ?
Then the switch is not able to build GRE header around this !
Packets are silently dropped!
Thatās very bad for an analysis tool.
Does it help to enable jumbo frames from mirror switch to mirror destination ?
But careless if it would work thatās not practicable in the field.
See here an example:
Classic mirror:
ERSPAN:
big data packets are silently dropped - only ACK are seen
ā03-21-2018 09:44 AM
ā03-02-2018 08:11 AM