настройки самые простые
monitor session 1 source interface Te1/4
monitor session 1 destination interface Te1/5
monitor session 1 filter packet-type good rx
show interfaces tenGigabitEthernet 1/5
TenGigabitEthernet1/5 is up, line protocol is down (monitoring)
Hardware is Ten Gigabit Ethernet Port, address is 881d.fc66.5b44 (bia 881d.fc66.5b44)
Description: SORM
MTU 1546 bytes, BW 10000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 96/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 10Gb/s, link type is auto, media type is 10GBase-SR-*
input flow-control is on, output flow-control is on
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:28, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 3782197000 bits/sec, 499545 packets/sec
39129 packets input, 2504256 bytes, 0 no buffer
Received 39129 broadcasts (39129 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 input packets with dribble condition detected
398797967955 packets output, 379069520250445 bytes, 0 underruns
0 output errors, 0 collisions, 3 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
СОРМ спецтех
говорят, что видит битый (но это со слов сотрудников органов)