Tutorials · Switching

How to Use Port Mirroring to Troubleshoot Network Problems

Copy traffic from a port or VLAN to an analyser port and capture it with Wireshark.

Intermediate8 min4 steps

Before you start

  • A managed switch
  • A laptop with Wireshark
  • One free switch port

Step by step

  1. Pick the source

    Choose the port or VLAN to observe, for example the uplink of a slow access point.

  2. Configure the session

    Mirror both directions to the analyser port.

    monitor session 1 source interface gigabitEthernet 0/5 both
    monitor session 1 destination interface gigabitEthernet 0/24
    
  3. Capture

    Connect the laptop to the destination port and start Wireshark on its wired interface.

  4. Remove the session

    Mirroring adds load and exposes traffic; delete it when you are done.

    no monitor session 1
    

Commands are generic, industry-standard examples. Exact syntax and menu names vary by model and firmware; check your device's manual on the Documentation page.

Pro tips

  • Do not mirror a 10G uplink to a 1G port: packets will be dropped.
  • Treat captures as sensitive data and delete them after analysis.
How to Use Port Mirroring to Troubleshoot Network Problems | Navijin Tutorials