How to capture packets via CSS610-8G-2S+IN

MicroTik.JPG
Hi Experts,

I have a new CSS610-8G-2S+IN and I want to use it to bridge a SFP+ NIC to Ethernet LAN. This is a special purpose SFP+ card which uses kernel bypass hence cannot do packet capture via wireshark or tcpdump. The vendor of the card advised to use this switch to capture the traffic via a mirror port.

  1. When I log into the switch is shows SwOS Lite. Do I need SwOS to do this and is it free for customers who bought the switch ?
  2. How do I setup the followin

Port Lock - Should it be checked ?
Lock On First - What is the use of this ?
Mirror Ingress - Yes /Checked
Mirror Egress - Yes/Checked
Mirror To - What should I put here ?
Storm Rate - Ignore ?
Limit Unknown Unicast - Ingnore ?
Flood Unknown Multicast - Ignore ?
Ingress Rate - Ignore ?
Egress Rate - Ignore ?

Thanks, lotusdew

Port Lock - Should it be checked ? Not normally
Lock On First - What is the use of this ? This locks the port to only work on the first MAC that connects to it. Not needed
Mirror Ingress - Yes /Checked What port or ports are the source of the mirror - specifically packets entering the switch via selected port or ports
Mirror Egress - Yes/Checked What port or ports are the source of the mirror - specifically packets leaving the switch via selected port or ports
Mirror To - What should I put here ? This selects what port should mirrored packets be sent to (port 1 as shown).
Storm Rate - Ignore ? Correct, ignore
Limit Unknown Unicast - Ignore ? Correct, ignore
Flood Unknown Multicast - Ignore ? Correct, ignore
Ingress Rate - Ignore ? Correct, ignore
Egress Rate - Ignore ? Correct, ignore

Read the manuals, then ask questions about what you don’t understand.
https://help.mikrotik.com/docs/pages/viewpage.action?pageId=39059480
https://help.mikrotik.com/docs/display/SWOS/CSS610+series+Manual
https://wiki.mikrotik.com/wiki/SwOS/CSS610 (older version)