H3C Technologies H3C SR8800 - Manual (Page 132)

120
Configuring port mirroring
NOTE:
In this document, SPC cards refer to the cards prefixed with SPC, for example, SPC-GT48L. SPE cards refer
to the cards prefixed with SPE, for example, SPE-1020-E-II.
Introduction
Port mirroring refers to the process of copying the packets that pass through a specified port to the
monitor port connecting to a monitoring device for packet analysis.
Terminologies of port mirroring
Mirroring source
The mirroring source can be one or more monitored ports. Packets (called mirrored packets) passing
through them are copied to a port connecting to a monitoring device for packet analysis. Such a port is
called a source port and the device where the port resides is called a source device.
Mirroring destination
The mirroring destination is the destination port (also known as the monitor port) of mirrored packets and
connects to the data monitoring device. The device where the monitor port resides is called the
destination device. The monitor port forwards mirrored packets to its connecting monitoring device.
NOTE:
A monitor port may receive multiple duplicates of a packet in some cases because it can monitor multiple
mirroring sources. For example, assume that Port 1 is monitoring bidirectional traffic on Port 2 and Port 3
on the same device. If a packet travels from Port 2 to Port 3, two duplicates of the packet will be received
on Port 1.
Mirroring direction
The mirroring direction indicates that the inbound, outbound, or bidirectional traffic can be copied on a
mirroring source.
• Inbound—Copies packets received on a mirroring source.
• Outbound—Copies packets sent out a mirroring source.
• Bidirectional—Copies packets both received and sent on a mirroring source.
Mirroring group
Port mirroring is implemented through mirroring groups, which fall into local, remote source, and remote
destination mirroring groups. For more information about the mirroring groups, see “ Port mirroring
classification and implementation .”