cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
734
Views
0
Helpful
1
Replies

EPC on 3560 running 15.0(2)SE7 - If I had hair I'd pull it out!

sdavids5670
Level 2
Level 2

I'm having a "Falling Down" moment with EPC.  Here's my config and CLI output (see below).  As you can see, traffic is ingress on Fa0/45 ('show interface' counters are incrementing).  I'm allegedly capturing packets ingress on Fa0/45.  However, the packet counter is not incrementing on my buffer associated with the Fa0/45 capture.  I'm pretty confident that this is CEF-switched traffic.  What am I doing wrong?  This is driving me nuts.  The only EPC I've been able to get working on this switch has been a process-switched capture.  What I'm trying to do is capture traffic traversing the switch from a workstation (connected on Fa0/45) to a router (connected on Fa0/1) in that one direction (WKSTN -> Fa0/45 -> Fa0/1 -> Router).  The EPC I created on the router is working BTW.  Is this a case of EPC not working as advertised on the switch?

 

switch#show monitor cap point all
Status Information for Capture Point c_fa0/45
IPv4 CEF
Switch Path: IPv4 CEF            , Capture Buffer: b_fa0/45            
Status : Active

Configuration:
monitor capture point ip cef c_fa0/45 FastEthernet0/45 in

Status Information for Capture Point c_fa0/1
IPv4 CEF
Switch Path: IPv4 CEF            , Capture Buffer: b_fa0/1             
Status : Active

Configuration:
monitor capture point ip cef c_fa0/1 FastEthernet0/1 out

switch#show monitor capture buffer all parameters
Capture buffer b_fa0/1 (linear buffer)
Buffer Size : 1048576 bytes, Max Element Size : 68 bytes, Packets : 0
Allow-nth-pak : 0, Duration : 0 (seconds), Max packets : 0, pps : 0
Associated Capture Points:
Name : c_fa0/1, Status : Active
Configuration:
monitor capture buffer b_fa0/1
monitor capture point associate c_fa0/1 b_fa0/1
Capture buffer b_fa0/45 (linear buffer)
Buffer Size : 1048576 bytes, Max Element Size : 68 bytes, Packets : 0
Allow-nth-pak : 0, Duration : 0 (seconds), Max packets : 0, pps : 0
Associated Capture Points:
Name : c_fa0/45, Status : Active
Configuration:
monitor capture buffer b_fa0/45
monitor capture point associate c_fa0/45 b_fa0/45

switch#show interfaces fa0/45 | inc packets input
     58656 packets input, 45047808 bytes, 0 no buffer
switch#show interfaces fa0/45 | inc packets input
     58671 packets input, 45059328 bytes, 0 no buffer
switch#show interfaces fa0/45 | inc packets input
     58687 packets input, 45071616 bytes, 0 no buffer

 

 

1 Reply 1

sdavids5670
Level 2
Level 2

I think I might have an answer to my own question.   There's no cef switching or process switching going on because the traffic is forwarded at layer 2 (fa0/45 is an access port and fa0/1 is a trunk port).  Does EPC only work on packets that are routed?

Review Cisco Networking for a $25 gift card