cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
378
Views
7
Helpful
4
Replies

sniff packets

emadehsan
Beginner
Beginner

Hello dear all,

I have some unwanted traffic on my switch port.

how can I findout IP addresses of the generator of these trafics?

thanks

4 Replies 4

ankbhasi
Cisco Employee
Cisco Employee

Hi Friend,

Which switch you are having on which you want to sniff the ports. You can configure SPAN on your switch and sniff the ports which ever you want.

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3750/12225see/scg/swspan.htm#wp1036816

EtherReal sniffer software will be one good option which you can have on your destination machine to capture traffic.

HTH

Ankur

*Pls rate all helpfull post

ps... etherreal is now wireshark

network.king
Enthusiast
Enthusiast

Hi ,

You can span your switchport traffic to another port and connect a pc with a sniffer or ethereal software to find the traffic

http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml#topic5

Hope this helps

regards

vanesh k

pciaccio
Enthusiast
Enthusiast

You can use the poor mans sniffer.. If your traffic goes through a layer 3 interface then you can enable route cache flow on the interface. capture the traffic, then do a show cache flow. it will show you the ip addresses source/destinations flows through the interface and ports they are using..

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers