cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
238
Views
2
Helpful
2
Replies

Ethernet II in monitor capture

WerllenSilva
Level 1
Level 1

Hello All, 

A monitor capture has been configured on Cisco 9400.

I have an external device with 2 interfaces (main/backup) on this Switch, when trying to monitor the main interface I received ethernet II in the capture and for the backup interface I can see the IP traffic.

Is there any config that I can remove Ethernet II packets ? Both are access interfaces on the same Vlan.

monitor capture NETCOPS interface GigabitEthernet2/1/0/26 BOTH
monitor capture NETCOPS match ipv4 any any
monitor capture NETCOPS buffer size 1 circular
monitor capture NETCOPS limit pps 1000

-------------------------------------------------------------

Main interface

Starting the packet display ........ Press Ctrl + Shift + 6 to exit

1 0.000000 b1:ee:f6:46:5d:ab -> c7:c3:9f:76:1f:1e 0x94e0 15819 Ethernet II
2 1097866898.571419 6c:86:ed:22:39:e4 -> ac:4c:03:5b:69:b5 0xcf4a 51096 Ethernet II
3 346698887.083807 92:03:36:c8:be:dc -> b6:54:a7:05:52:bb 0xb675 19073 Ethernet II

----------------------------------------------------------------------

Backup - 

Starting the packet display ........ Press Ctrl + Shift + 6 to exit 1

0.000000 105.103.10.33 -> 224.0.0.5 OSPF 110 Hello Packet
2 0.000029 105.103.10.33 -> 224.0.0.5 OSPF 110 Hello Packet

1 Accepted Solution

Accepted Solutions

balaji.bandi
Hall of Fame
Hall of Fame

how does the connection looks like :

personally i think that  is expected - may be you need to filter exporting PCAP to Wireshark

check some filter what can be possible :

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9400/software/release/16-6/configuration_guide/nmgmt/b_166_nmgmt_9400_cg/b_166_nmgmt_9400_cg_chapter_0101.html

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

View solution in original post

2 Replies 2

Can yoh share monitor capture you use for both interfaces 

MHM

balaji.bandi
Hall of Fame
Hall of Fame

how does the connection looks like :

personally i think that  is expected - may be you need to filter exporting PCAP to Wireshark

check some filter what can be possible :

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9400/software/release/16-6/configuration_guide/nmgmt/b_166_nmgmt_9400_cg/b_166_nmgmt_9400_cg_chapter_0101.html

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Review Cisco Networking for a $25 gift card