To verify that the monitoring interface actually sees traffic, use the Solaris snoop command:

snoop –d [name of interface]

For a 4230 IDS sensor, the Ethernet interface name is spwrX, as shown in the following example:

snoop –d spwr0 ; where spwr0 is the monitor interface, and
snoop –d spwr1 ; where spwr1 is the control interface
For Token Ring, the interface name is mtok36, and for FDDI, the interface name is ptpci.