To create a span port on a cisco 3560 “swouter” the following preparations:
1. Connect the host/server/ip phone is connected to a port on the switch
2. Connect the wireshark client to another port on the switch. (this will be the destination port.
3. Connect the uplink for the client to the switch (if not already configured.)
to configure the switch:
monitor 1 source interface fastethernet 0/1
monitor 1 destination interface fastethernet 0/2
install wireshark and configure the filter to display only the host. (ip host)