Viewing this page
one of the recommendations is to
I found over 20% of the packets captured were one-sided conversations (only contained rx or tx). The devices were not using UDP; therefore, these should have been two-sided. Checking the monitor port configuration it was set to rx only. I am discussing with my WAN engineers to reconfigure to both.
What other signs/anomalies/patterns should I be looking for in the capture to determine if the SPANs are still improperly configured? What else would be causing the sequence gap and the duplicates seen?
Thanks and God bless,
Below are some highlighted points which need to be consider to make a DCRUM work properly. Review the documentation link for more insight.