Source note · Analysing a SIP call in Wireshark
On Catalyst 9300 a SPAN source is set with 'monitor session <n> source {interface <id> | vlan <id>} [both | rx | tx]', and with no direction given both sent and received traffic are monitored.
Checked 2026-09-24
- Vendor
- Cisco
- Product
- Catalyst 9300
- Subsystem
- SPAN
- Deployment
- on-premises
- Region
- not restricted
- Release range
- IOS XE 17.17.x
- Checked
- 2026-09-24
Sources
- Network Management Configuration Guide, Cisco IOS XE 17.17.x (Catalyst 9300 Switches) - Configuring SPAN and RSPAN — Cisco Systems · tier 2 current vendor documentation · Configuring SPAN and RSPAN > Creating a Local SPAN Session
Cite this note
APA
WarmTransfer. (2026, September 24). Analysing a SIP call in Wireshark: source note sip-call-analysis-wireshark-span-source-direction. WarmTransfer. https://warmtransfer.net/knowledge/claims/sip-call-analysis-wireshark-span-source-direction
BibTeX
@misc{warmtransfer-claim-sip-call-analysis-wireshark-span-source-direction,
title = {Analysing a SIP call in Wireshark: source note sip-call-analysis-wireshark-span-source-direction},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/sip-call-analysis-wireshark-span-source-direction},
note = {Source note sip-call-analysis-wireshark-span-source-direction, checked 2026-09-24}
}