07-01-2021 12:19 AM
I have an DMZ network which has 10 DMZ interfaces from DMZ1 to DMZ 10.
I want to packet capture for an ip address in DMZ network.[10.10.x.x]
I want to do a packet capture but am not sure through which interface my traffic is flowing.
is there any way to find in CLI which interface this ip will flow to the destination.
Solved! Go to Solution.
07-01-2021 02:31 AM
You could run "show route 10.10.x.x" that will identify the interface.
You could run a packet capture filtering on the source, that will identify the source interface.
07-01-2021 12:26 AM
If you know the source interface and IP address, then you can run packet-tracer command, this will identify the egress interface and ultimately if the packet is allowed or denied.
If you run a packet capture you don't necessarily need to specify an interface, just filter on host addresses.
07-01-2021 02:23 AM
Yes thanks for the info Rob.
But i know only source address, not sure of the interface by which it is configured.
is there any way we can get the interface details for the particular source and destination.
07-01-2021 02:31 AM
You could run "show route 10.10.x.x" that will identify the interface.
You could run a packet capture filtering on the source, that will identify the source interface.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide