cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1013
Views
0
Helpful
3
Replies

ACL capture on Nexus 7K

imran.moulvi
Level 1
Level 1

Hi ,

I am trying to setup an ACL capture on Nexus 7K as we need to have more than 2 span sessions.

The capture is working however the wireshark traces only show the L2 information and not the L3 header.

Has anybody come across this issue and has any idea.

I am attaching the config that I am doing and also the wireshark pcap file

Any help would be appreciated.

Regards,

Imran.

3 Replies 3

nkarpysh
Cisco Employee
Cisco Employee

HI Imran,

I see that protocol is unknown in those packet - 0xf000. Can you please try some other L3 traffic through this VLAn and see if that also decoded with unknown protocol type instead of 0x8000 for ip.

Nik

HTH,
Niko

Hi Nikolay,

I've tried http/telnet traffic but it yields the same results. I am not sure whats going on.

Hi,

Can you pls paste "show ver", "show ip access-lists capture session 1", "show running-config aclmgr" and  "show int vlan3".

Nik

HTH,
Niko
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco