About CISCO packet capture

[mike1125567166]

Good Day,

Are there any method  to capture packets on  cisco equipments ?  

eg.     cisco EPC  ,  netflow

[Ashok Kumar]

Hi,

Nexus series does have wireshark/etheral kind of packet capture utility -

Ethanalyzer: Cisco NX-OS Software Built-In Packet Capture Utility

http://www.cisco.com/c/en/us/products/collateral/switches/nexus-3000-series-switches/white_paper_c11-673817.html

- Ashok

***************************************************************************************************************

Please rate the post or mark as correct answer as it will help others looking for similar information

***************************************************************************************************************

[mike1125567166]

for example,we have a switch now,we can use  port mirroring to get the packets ,are there any other ways to get the packets  on routers or switches?  

[Marvin Rhoads]

The capability to do this varies according to the hardware and software versions. For instance, on newer layer 3 switches such as Catalayst 4500 or 3800/3600 series running IOS-XE with IP Base or higher license, you get a full featured Wireshark capture utility built-in.

On older switches or those same switches with LAN Base license, you are limited to span ports and an off-device capture /analysis tool.

Ashok mentioned the Ethanalyzer on NX-OS based devices but that is limited to traffic destined for the device itself  

Routers have very limited raw packet analysis capability, and are designed instead to provide visibility via methods such as Netflow and AVC with NBAR. 

[mike1125567166]

Thanks you !  

But I just want to know how i can get packets  from routers or switches based on old  hardware and software versions. 

[Marvin Rhoads]

Mostly you cannot. The older Catalyst 6509 has some capability. Other older Catalayst switches do not. Routers do not.