CSS11501 tcpdump option

[csco10260962]

Is there a function like tcpdump possible on a css11501

[Gilles Dufour · Accepted solution]

CSS11503(config)# setspan ?

src_port Configure Source Port for SPAN.

CSS11503(config)#

You can span a port and capture the traffic on a sniffer.

If you want to see packets on CSS console, you can use the following feature:

llama

flow trace-ip x.x.x.x

flow option ?

<--- you have to select the option you want --->

To stop this use 'flow option 0x0'.

This is very limited because only showing packets being software switched [so only SYN].

It is also risky if you have too much traffic to display.

Regards,

Gilles.

[d.haeni]

Hello Gilles,

I find these debug-mode commands very helpful, but I haven't found any documentation for the 8.x releases on cisco.com.

Is this on purpose because it can do some harm? everybody can do a "debug ip packet" on an IOS Device, too :)

Regards

/David