cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
833
Views
0
Helpful
2
Replies

How to capture data-plane traffic on a cisco 3000 series switch

larrycotton
Level 1
Level 1

Hi

I have a nexus 3548x switch.

 

I'd like to capture packets (and write to buffer or file) on the switch, so that I can look at an analyze the traffic that goes in and/or out of the interface. On ios you can do this using 'monitor capture' commands. However these commands do not seem to be available on the nexus.

 

Does anyone know how I can do the equivalent on the nexus ?

My searches for how to do this have been sending me in circles. There is a lot of documentation about ethanalyzer, but that seems to be designed to capture control-plane traffic and I'm looking to capture data-plane traffic on a particular interface.

 

Some documentation suggests you can do this by replicating data-plane traffic using ACL or SPAN and view it using ethanalyzer on the sup-eth0 (inband) interface. However the switch I have does not seem to provide "sup-eth0" ?
# ethanalyzer local interface ?
  inbound-hi   Inbound(high priority) interface
  inbound-low  Inbound(low priority) interface
  mgmt         Management interface


Anyone know how can I capture data-plane traffic on a nexus 3548 switch ?

2 Replies 2

balaji.bandi
Hall of Fame
Hall of Fame

The command looking under monitor session.

Example :

 

CORESW2(config)# monitor session 1
CORESW2(config-monitor)# source interface ?
ethernet Ethernet IEEE 802.3z
port-channel Port Channel interface
sup-eth Ethernet Inband interface

 

BB

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hi

Thank you for the reply.

 

Do you know how I would capture those packets ? I was hoping to use ethanalyzer, but it does not give me the inband option.

 

Can I capture to a buffer/file in pcap format ? Or do I have to somehow log then, then parse the log files ?

Review Cisco Networking for a $25 gift card