Hello,
when using Ethanalyzer command to trace frames sent or received by the N7K Supervisor, is there an option in this command or some eyecatcher in the resulting trace that allows to know if a frame has been received or sent by the Supervisor ?
when the MAC addresses of the frame are unicast, it is possible to guess this information, but when they are multicast or broadcast, this is not possible;
example of an ARP sent by HSRP :
summary view :
N7K1# ethanalyzer local interface inband display-filter "arp" limit-captured-frames 10
2015-09-21 09:41:56.476946 00:00:0c:07:ac:18 -> ff:ff:ff:ff:ff:ff ARP Gratuitous ARP for 10.64.23.190 (Request)[Packet size limited during capture]
detailled view :
N7K1# ethanalyzer local interface inband display-filter "arp" limit-captured-frames 10 detail
NXOS Protocol
NXOS VLAN: 24
NXOS SOURCE INDEX: 2606
NXOS DEST INDEX: 1024
Frame 4 (60 bytes on wire, 60 bytes captured)
Arrival Time: Sep 21, 2015 09:52:09.636383000
[Time delta from previous captured frame: 0.006746000 seconds]
[Time delta from previous displayed frame: 0.006746000 seconds]
[Time since reference or first frame: 0.008739000 seconds]
Frame Number: 4
Frame Length: 60 bytes
Capture Length: 60 bytes
[Frame is marked: False]
[Protocols in frame: eth:arp]
Ethernet II, Src: 00:00:0c:07:ac:18 (00:00:0c:07:ac:18), Dst: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff)
Destination: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff)
Address: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff)
.... ...1 .... .... .... .... = IG bit: Group address (multicast/broadcast)
.... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
Source: 00:00:0c:07:ac:18 (00:00:0c:07:ac:18)
Address: 00:00:0c:07:ac:18 (00:00:0c:07:ac:18)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Type: ARP (0x0806)
Trailer: 000000000000000000000000000000000000
Address Resolution Protocol (request/gratuitous ARP)
Hardware type: Ethernet (0x0001)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: request (0x0001)
[Is gratuitous: True]
Sender MAC address: 00:00:0c:07:ac:18 (00:00:0c:07:ac:18)
Sender IP address: 10.64.23.190 (10.64.23.190)
Target MAC address: ff:ff:ff:ff:ff:ff (ff:ff:ff:ff:ff:ff)
Target IP address: 10.64.23.190 (10.64.23.190)
thanks in advance
