• enable
  • conf t
  • no monitor session 1
  • monitor session 1 source interface GigabitEthernet1/48
  • monitor session 1 destination interface GigabitEthernet1/41 encapsulation dot1q
  • interface GigabitEthernet1/48 (internet connection / port that is being monitored)
  • interface GigabitEthernet1/41 (mirror port connected to the monitoring device)
  • interface GigabitEthernet1/42 (port for egress vlan 16)