Revision history [back]
Mirroring capture out of order or reversed in sequence get reply before you request
I'm test mirroring device
one is get gear switch, with mirror port configured
one is a network tap DCSW-1005
one is a ixia port aggregator , TPA-CU3
3 Device used.
1 router 192.168.1.254
1 PC 192.168.1.223
1 PC for mirroring capture
I found no matter how to change port or change settings there is a high chance the mirroring capture is not in order. ICMP reply can be captured before ICMP request.