Yes, I was able to select the interface that the span port is connected to. My Orion server monitors my network over a management vlan, I access the server over the native vlan. I also have the span port setup for a total of 3 nics on this machine. I am able to talk to the sensor server over the manangement vlan and I changed Orion to monitor the sensor server over the management vlan. I am still not getting any data. I installed wireshark on the sensor server and can see tons of packets on the nic the span port is connected too. The traffic is just not getting to the Orion server for some reason.
↧