Exception Span - Cisco Nexus 7000 Series Configuration Manual

Configuring SPAN
Every SPAN session (traditional and extended) has an associated filter. Every SPAN session has one filter
resource. A simple filter has only one rule, and you can add multiple fields or conditions to this rule. The
packets are replicated only if all the conditions are met.
Table 32: Supported Filter Fields
Ethernet
Frame Type
VLAN
TR
BPDU
Port Channel Lane
Flow Hash
L2 MAC DA
L2 MAC SA
EtherType
CoS/VL

Exception SPAN

Exception SPAN enables you to span exception packets. Packets that have failed an intrusion detection system
(IDS), Layer 3 IP verification, and FabricPath are treated as exception packets.
Beginning with Cisco NX-OS Release 6.2(10), you can remove the FabricPath and VLAN tag headers
Note
from SPAN packets. Use the system default switchport monitor exclude header and the switchport
monitor exclude header commands. See the Cisco Nexus 7000 Series NX-OS Security Command Reference
for more information on these commands.
An exception SPAN session is supported in either one of the two traditional bidirectional SPAN sessions or
in one of the extended SPAN sessions. Rate limiters, MTU truncation, and sampling are supported in the
exception SPAN session. Only the exception packets sent to the drop destination interface are supported as
a SPAN source. Exception packets that are pushed to the supervisor, ACLQoS, or Layer 2 are not spanned.
Each VDC supports one exception SPAN session.
IPv4 IPv6
Frame Type Frame Type
VLAN VLAN
TR TR
BPDU BPDU
Port Channel Port Channel Lane
Lane
Flow Hash
Flow Hash
L2 MAC DA
L2 MAC DA
L2 MAC SA
L2 MAC SA
EtherType
EtherType
CoS/VL
CoS/VL
ToS
ToS
L4 Protocol
L4 Protocol
IPv6 SA
IPv4 SA
IPv6 DA
IPv4 DA
Cisco Nexus 7000 Series NX-OS System Management Configuration Guide
Exception SPAN
ARP/RARP FCoE
Frame Type Frame Type
VLAN VLAN
TR TR
BPDU BPDU
Port Channel Port Channel Lane
Lane
Flow Hash
Flow Hash
L2 MAC DA
L2 MAC DA
L2 MAC SA
L2 MAC SA
EtherType
EtherType
CoS/VL
CoS/VL
FCD_ID
ARP
FCS_ID
Request
SOF
Sender IP
R_CTL
Target IP
TYPE
Cmd_Code
283