- Community Home
- >
- Networking
- >
- Legacy
- >
- Switches, Hubs, Modems
- >
- Re: HP 2650 switch weird behaviour
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-09-2006 12:08 AM
тАО11-09-2006 12:08 AM
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-09-2006 12:55 AM
тАО11-09-2006 12:55 AM
Re: HP 2650 switch weird behaviour
Have mirrored the port you are trying to analyze in the correct group ?
Port mirroring on a 2650/2650-PWR for monitoring are in two groups, these are:
1-24 and 49
25-48 and 50
the port groupings are a representation of port to netswitch ASIC within this model of switch.
I hope this helps,
Jase
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-09-2006 01:08 AM
тАО11-09-2006 01:08 AM
Re: HP 2650 switch weird behaviour
Have you checked that monitoring is enabled on the switch and the correct port/ports are set to be monitored.
If you do a "show monitor" command, to see what ports are being used and if monitoring is on.
Try removing and recreating the mirror again by using the following commands.
[no] mirror-port [< port-num >]
[no] interface ethernet < monitor-list > monitor
These are run from the Global and Interface context respectively, ensuring you choose the correct groups.
I hope this helps,
Jase
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-09-2006 01:13 AM
тАО11-09-2006 01:13 AM
Re: HP 2650 switch weird behaviour
I reset the switch and the weird behaviour is over. Can a short-circuit cause this kind of behaviour?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-09-2006 01:20 AM
тАО11-09-2006 01:20 AM
SolutionI have never heard of short circuits within the switch backplane, but it might be worth mointoring the logs to see if any unusal entries happen.
Also I would recommend updating the software to the latest version if it is not up to date, this can be found at:
http://www.hp.com/rnd/software/j49008106.htm
regards,
Jase
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-09-2006 01:48 AM
тАО11-09-2006 01:48 AM
Re: HP 2650 switch weird behaviour
There are quite a few apps out there that simplify this attack such as Cain & Abel, so you might want to run a packet capture to see if anything suspicious is going on.
You can find more info on on ARP (Cache) Poisoning here: http://en.wikipedia.org/wiki/ARP_spoofing
Ali
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-09-2006 12:34 PM
тАО11-09-2006 12:34 PM
Re: HP 2650 switch weird behaviour
Another reason this can occur is if spanning-tree is enabled and the topology changes keeps increasing.
Check 'show mac-address' and 'show span' status. If it happens again capture a 'show tech all' while it occurs.