04-11-2024 04:37 PM
Hello All,
A monitor capture has been configured on Cisco 9400.
I have an external device with 2 interfaces (main/backup) on this Switch, when trying to monitor the main interface I received ethernet II in the capture and for the backup interface I can see the IP traffic.
Is there any config that I can remove Ethernet II packets ? Both are access interfaces on the same Vlan.
monitor capture NETCOPS interface GigabitEthernet2/1/0/26 BOTH
monitor capture NETCOPS match ipv4 any any
monitor capture NETCOPS buffer size 1 circular
monitor capture NETCOPS limit pps 1000
-------------------------------------------------------------
Main interface
Starting the packet display ........ Press Ctrl + Shift + 6 to exit
1 0.000000 b1:ee:f6:46:5d:ab -> c7:c3:9f:76:1f:1e 0x94e0 15819 Ethernet II
2 1097866898.571419 6c:86:ed:22:39:e4 -> ac:4c:03:5b:69:b5 0xcf4a 51096 Ethernet II
3 346698887.083807 92:03:36:c8:be:dc -> b6:54:a7:05:52:bb 0xb675 19073 Ethernet II
----------------------------------------------------------------------
Backup -
Starting the packet display ........ Press Ctrl + Shift + 6 to exit 1
0.000000 105.103.10.33 -> 224.0.0.5 OSPF 110 Hello Packet
2 0.000029 105.103.10.33 -> 224.0.0.5 OSPF 110 Hello Packet
Solved! Go to Solution.
04-13-2024 02:18 AM
how does the connection looks like :
personally i think that is expected - may be you need to filter exporting PCAP to Wireshark
check some filter what can be possible :
04-12-2024 09:30 AM
Can yoh share monitor capture you use for both interfaces
MHM
04-13-2024 02:18 AM
how does the connection looks like :
personally i think that is expected - may be you need to filter exporting PCAP to Wireshark
check some filter what can be possible :
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide