we have a switch core aruba 2930F and we have 3 VLAN, I analyse the traffic of network and we have a mirror port for this process, I conect a machinge whit wireshark and in the analysis we have a lost of pachet.
is there any way to know why i have this packet loss.
it is not really a packet loss... but a retry packet
how do you have configure the packet mirror ?
yes, it is a packet retransmission and TCP out of order.
This is the configuration of mirror port
switch(config)# mirror 1 port 11
switch(config)# interface VLAN 1 monitor all both mirror 1switch(config)# mirror 2 port 11switch(config)# interface VLAN 2 monitor all both mirror 2switch(config)# mirror 3 port 11switch(config)# interface VLAN 3 monitor all both mirror 3
@AntonioSanchez wrote: yes, it is a packet retransmission and TCP out of order.
Technically speaking they (packets retransmission, TCP out-of-order) could happen on mirror port (in particular load/switch conditions from what I understood).
I recall I recently have read an old paper (2007 with HP ProCurve 2824 versus a Cisco Catalyst 2950) about this issues, it's Traffic Trace Artifacts due to Monitoring Via Port Mirroring. It was quite old but it's a quite interesting read also these days.
Edit: If I were the OP I would change/correct/adapt the Thread's title with something like "Aruba 2930R: mirror port and packets re-transmission/out-of-order" since there isn't specifically any packet loss.
At Aruba, we believe that the most dynamic customer experiences happen at the Edge. Our mission is to deliver innovative solutions that harness data at the Edge to drive powerful business outcomes.
© Copyright 2021 Hewlett Packard Enterprise Development LPAll Rights Reserved.