01-06-2021 12:01 AM
Hi there,
I have a Cisco WS-C4510R-E (MPC8548) running cat4500e-ipbasek9-mz.152-2.E8.bin image. I want to do an embedded packet capture on an interface. I'm aware whatever packets I capture will be sent to the CPU.
However, I'd like to know exactly which packets will be sent to the CPU. I will be applying an ACL filter. Will it be:
a) all packets from the interface I configure as the capture point (and then the ACL filters afterwards)
b) the packets that match my ACL
The reason I ask is because in the EPC Wireshark feature for IOS-XE the packets that are sent to the CPU can be filtered using the 'match' command. There is a filter command as well which only filters AFTER the packets are sent to CPU.
So i just want to know whether it's similar for the Cisco IOS EPC. Hope that makes sense.
Solved! Go to Solution.
01-06-2021 08:30 AM
I've actually just proved b) to be correct by testing. I will close thread.
01-06-2021 08:30 AM
I've actually just proved b) to be correct by testing. I will close thread.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide