Does a port mirror send ethernet frames out of the switch-port with the 802.1Q header bytes still on the frame?
Asked
Active
Viewed 339 times
1 Answers
4
By default, no. However, the behavior can be controlled on the monitor
command; the encapsulation
argument controls this. replicate
will preserve the encapsulation type that the packet had in transit, while dot1q
will force the 802.1Q header.
Shane Madden
- 112,982
- 12
- 174
- 248