SW1(config)#monitor session 1 source interface f0/0 //定義被監(jiān)控的端口 
SW1(config)#monitor session 1 destination interface f0/12 //接分析工具的端口（PC抓包） 
SW1#show monitor session 1 //查看監(jiān)控會(huì)話(huà)1 
Session 1 
--------- 
Source Ports: 
RX Only: None 
TX Only: None 
Both: fa0/0 
Source VLANs: 
RX Only: None 
TX Only: None 
Both: None 
Destination Ports: Fa0/12 
Filter VLANs: None 
SW2(config)#monitor session 1 source vlan 10 both //定義對(duì)指定VLAN的信息做雙向的監(jiān)控 
SW2(config)#monitor session 1 destination interface f0/12 //接分析工具的端口（PC抓包） 
SW2(config)#monitor session 1 source interface f0/0 - 8 both //對(duì)指定多個(gè)端口的信息做雙向的監(jiān)控 
SW2(config)#monitor session 1 destination interface f0/12 //接分析工具的端口（PC抓包） 

二．兩臺(tái)交換機(jī)之上監(jiān)控分析的做法 
1．首先在VTP域的SERVER端建立一個(gè)新的VLAN 沒(méi)有任何端口屬于這個(gè)VLAN 
SW2#vlan database 
SW2(vlan)#vlan 901 
VLAN 901 added: 
Name: VLAN0901 
SW2(vlan)#remote-span 

2．在被監(jiān)控的交換上做如下定義 
SW1(config)#monitor session 1 source interface f0/0 both //定義對(duì)指定接口的信息做雙向的監(jiān)控 
SW1(config)#monitor session 1 destination remote vlan 901 Reflestor-port f0/12 
//把監(jiān)控到的信息發(fā)往VLAN 901上的f0/12 

3．在接有分析工具的交換機(jī)上做如下配置 
SW2(config)#monitor session 1 source remote vlan 901 //監(jiān)控VLAN 901 的信息 
SW2(config)#monitor session 1 destination remote interface f0/1 
//把監(jiān)控到的信息發(fā)往接有分析工具的接口