cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
10635
Views
35
Helpful
18
Replies

Ask the Expert: Packet Capture Capabilities of Cisco Routers and Switches

ciscomoderator
Community Manager
Community Manager

With Rahul Rammanohar 

Hitesh KumarRahul Rammanohar

Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about packet capture capabilities of Cisco routers and switches.

In May 2013, we created a video that included packet capture capabilities across multiple Cisco routers and switches. For each product, we began with a discussion about the theory of the capabilities, followed by an explanation of the commands, and we concluded with a demo on real devices. In this Ask the Expert event, you’re encouraged to ask questions about the packet capture capabilities of these Cisco devices:

•       7600/6500: mini protocol analyzer (MPA), ELAM, and Netdr

•       ASR9k: network processor capture

•       7200/ISRs: embedded packet capture

•       Cisco Nexus 7K, 5K, and 3K: Ethanalyzer

•       Cisco Nexus 7K: ELAM

•       CRS: show captured packets

•       ASR1K: embedded packet capture

More Information

Blog URL: Packet Capture Capabilities of Cisco Routers and Switches

Watch the Video:  https://supportforums.cisco.com/videos/6226

Hitesh Kumar is a customer support engineer in the High-Touch Technical Services team at Cisco specializing in routing protocols. He has been supporting major service providers and enterprise customers in routing, Multiprotocol Label Switching (MPLS), multicast, and Layer 2 VPN (L2VPN) issues on routing platforms for more than three years. He has more than six years of experience in the IT industry and holds a CCIE certification (number 38757) in service. 


Rahul Rammanohar is a technical leader with the High-Touch Technical Support Team in India. He handles escalations in the area of routing protocols and large-scale architectures for devices running Cisco IOS, IOS-XR, and IOS-XE Software. He has been supporting major service providers and large enterprise customers for routing, MPLS, multicast, and L2VPN issues on all routing platforms. He has more than 13 years of experience and holds a CCIE certification (number 13015) in routing/switching and service provider.


Remember to use the rating system to let Hitesh and Rahul know if you have received an adequate response.  

Because of the volume expected during this event, Hitesh and Rahul might not be able to answer each question. Remember that you can continue the conversation in the Service Provider, sub-community forum shortly after the event. This event lasts through November 1, 2013. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.

18 Replies 18

hello Hitesh & Rahul,

My ASR1K is running a release prior to 3.7.  How do I capture packets on my router?  Thanks in advance for your help.

Lisa

Hi Lisa,

Thanks for your query.

Prior to release 3.7, the best way to capture packets is to use ERSPAN. The following link details how to configure the ERSPAN on the ASR 1000 with examples.

http://www.cisco.com/en/US/docs/ios-xml/ios/lanswitch/configuration/xe-3s/lnsw-conf-erspan.html

From release 3.7, you have the option of configuring Embedded Packet Capture (EPC), which is what we have included in our video.

http://www.cisco.com/en/US/docs/ios-xml/ios/epc/configuration/xe-3s/asr1000/nm-packet-capture-xe.html

Thanks and regards,

Hitesh and Rahul.

szakaria1
Level 1
Level 1

Dear Expert, I have a Cisco router 870, i would like to restrict some websites on this router,

Please assist me on how to do this,

Hello Sumbuko

    Thanks for your query.You might have to get in touch with some security expert on this query. We think you can do it using URL filtering but you should be using correct IOS with feature set/license. Below are some of the links which might be useful for you:

http://www.cisco.com/en/US/prod/collateral/routers/ps380/ps6200/product_data_sheet0900aecd8028a976.html

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5710/ps1018/product_data_sheet09186a0080117962.html

    We would still request you to get this query to someone in security domain as this might not be the right forum to discuss this query.

Thanks and regards,

Hitesh and Rahul.