Cisco nexus packet capture for VRF vlan interface

[MonkeyBear007]

Need to packet capture a vrf vlan interface for traffic what is the best way

[pieterh]

I do not understand the question

vlan interface is Layer-2, vfr is Layer-3.
-> just specify vlan as monitor source?

[MonkeyBear007]

nexus doesn't let use the VRF vlan at layer 3

[pieterh]

cna you publish the command you used and the response you got?

you need to specify the type of interface
     source interface type slot/port [rx | tx | both]
or specify the vrf in the monitor session command
monitor session <id> source vrf <name> 

[Cristian Matei]

Hi,

   It doesn't matter if the interface is in VRF or GRT. If you want a packet capture, use this guide for Ethanalyzer: https://www.cisco.com/c/en/us/support/docs/switches/nexus-7000-series-switches/116136-trouble-ethanalyzer-nexus7000-00.html

If you want a SPAN/RSPAN, use these guides:

https://www.cisco.com/c/en/us/support/docs/switches/nexus-9000-series-switches/215329-nexus-9000-cloud-scale-asic-nx-os-span-t.html

https://www.cisco.com/c/en/us/support/docs/switches/nexus-9000-series-switches/213848-nexus-9000-cloud-scale-asic-tahoe-nx-o.html

You can also take a look on this self-explanatory Cisco Live Presentation:

https://www.ciscolive.com/c/dam/r/ciscolive/global-event/docs/2024/pdf/TACDCN-2010.pdf

Thanks,

Cristian.

[MonkeyBear007]

I opened a ticket with support, and they didn't see it, so I need to open another one to figure out why.

[srimal99]

In addition to mention above ,other option would be set up at Tap on outbound interface.You can use vendor such as netscout,extrahop. Plenty of vendors if you are looking for network taps.