cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
653
Views
0
Helpful
1
Replies

EPC on 3560 running 15.0(2)SE7 - If I had hair I'd pull it out!

sdavids5670
Level 2
Level 2

I'm having a "Falling Down" moment with EPC.  Here's my config and CLI output (see below).  As you can see, traffic is ingress on Fa0/45 ('show interface' counters are incrementing).  I'm allegedly capturing packets ingress on Fa0/45.  However, the packet counter is not incrementing on my buffer associated with the Fa0/45 capture.  I'm pretty confident that this is CEF-switched traffic.  What am I doing wrong?  This is driving me nuts.  The only EPC I've been able to get working on this switch has been a process-switched capture.  What I'm trying to do is capture traffic traversing the switch from a workstation (connected on Fa0/45) to a router (connected on Fa0/1) in that one direction (WKSTN -> Fa0/45 -> Fa0/1 -> Router).  The EPC I created on the router is working BTW.  Is this a case of EPC not working as advertised on the switch?

 

switch#show monitor cap point all
Status Information for Capture Point c_fa0/45
IPv4 CEF
Switch Path: IPv4 CEF            , Capture Buffer: b_fa0/45            
Status : Active

Configuration:
monitor capture point ip cef c_fa0/45 FastEthernet0/45 in

Status Information for Capture Point c_fa0/1
IPv4 CEF
Switch Path: IPv4 CEF            , Capture Buffer: b_fa0/1             
Status : Active

Configuration:
monitor capture point ip cef c_fa0/1 FastEthernet0/1 out

switch#show monitor capture buffer all parameters
Capture buffer b_fa0/1 (linear buffer)
Buffer Size : 1048576 bytes, Max Element Size : 68 bytes, Packets : 0
Allow-nth-pak : 0, Duration : 0 (seconds), Max packets : 0, pps : 0
Associated Capture Points:
Name : c_fa0/1, Status : Active
Configuration:
monitor capture buffer b_fa0/1
monitor capture point associate c_fa0/1 b_fa0/1
Capture buffer b_fa0/45 (linear buffer)
Buffer Size : 1048576 bytes, Max Element Size : 68 bytes, Packets : 0
Allow-nth-pak : 0, Duration : 0 (seconds), Max packets : 0, pps : 0
Associated Capture Points:
Name : c_fa0/45, Status : Active
Configuration:
monitor capture buffer b_fa0/45
monitor capture point associate c_fa0/45 b_fa0/45

switch#show interfaces fa0/45 | inc packets input
     58656 packets input, 45047808 bytes, 0 no buffer
switch#show interfaces fa0/45 | inc packets input
     58671 packets input, 45059328 bytes, 0 no buffer
switch#show interfaces fa0/45 | inc packets input
     58687 packets input, 45071616 bytes, 0 no buffer

 

 

1 Reply 1

sdavids5670
Level 2
Level 2

I think I might have an answer to my own question.   There's no cef switching or process switching going on because the traffic is forwarded at layer 2 (fa0/45 is an access port and fa0/1 is a trunk port).  Does EPC only work on packets that are routed?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card