Mini-6 port mirror strange packet appendage
Posted: Wed Apr 06, 2016 12:06 pm
We've currently got a mini-6 and a NUC with two ethernet interfaces at a customers house to monitor the connection between their router and their CPE. They've been experiencing a strange issue where their router seems to be losing it's ip lease every 30 minutes or so. They work fine on a second connection they have. So we installed an active wireshark capture to try and figure out what's going on.
One strange thing we're seeing is, about 95% of the packets are being appended with a "VSS Monitoring Ethernet Trailer" to the end of them. My question is merely if there's a chance the Netonix is doing this as part of the mirroring, or how it forwards packets in anyway? Working on any possible theories, so figured we would ask.
One strange thing we're seeing is, about 95% of the packets are being appended with a "VSS Monitoring Ethernet Trailer" to the end of them. My question is merely if there's a chance the Netonix is doing this as part of the mirroring, or how it forwards packets in anyway? Working on any possible theories, so figured we would ask.
