3Com WX1200 3CRWX120695A, WX2200 3CRWX220095A, WX4400 3CRWX440095A, WXR100 3CRWXR10095A

set snoop 703

The MAP that is running a snoop filter forwards snooped packets

directly to the observer. This is a one-way communication, from the

MAP to the observer. If the observer is not present, the MAP still sends

the snoop packets, which use bandwidth. If the observer is present

but is not listening to TZSP traffic, the observer continuously sends

ICMP error indications back to the MAP. These ICMP messages can

affect network and MAP performance.

Examples — The following command configures a snoop filter named

snoop1 that matches on all traffic, and copies the traffic to the device

that has IP address 10.10.30.2:

WX1200# set snoop snoop1 observer 10.10.30.2 snap-length 100

The following command configures a snoop filter named snoop2 that

matches on all data traffic between the device with MAC address

aa:bb:cc:dd:ee:ff and the device with MAC address 11:22:33:44:55:66,

and copies the traffic to the device that has IP address 10.10.30.3:

WX1200# set snoop snoop2 frame-type eq data mac-pair

aa:bb:cc:dd:ee:ff 11:22:33:44:55:66 observer 10.10.30.3

snap-length 100