Monitor specific traffic of sub interface

[w.boerendans]

Hi,

I have an ASR router with a 10 Gb interface. On this interface several sub-interfaces are configured. For now, I want to monitor traffic from one of these sub interfaces. 

Monitoring per VLAN is possible with the commands, with the commands such as:

Switch(config)# monitor session 1 source interface fastethernet 4/10
Switch(config)# monitor session 1 filter vlan 57
Switch(config)# monitor session 1 destination interface fastethernet 4/15

Anybody knows how I can do this with sub interfaces?

Thanks!

[Francesco Molino]

Hi

Span isn't working on subinterfaces.

However, on ASR there is an embedded packet capture. You can export the capture in a pcap file and look at it from your PC or as well look at these traces directly on the router.

The minding is create and acl to match the traffic you want to analyze (Then you will be able to select your subinterface network as source/destination). Start the capture and export it.

I will not type all commands here as there are some good documentations:

- http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/epc/configuration/xe-16/epc-xe-16-book/nm-packet-capture-xe.html

- https://supportforums.cisco.com/document/139686/configuration-example-embedded-packet-capture-cisco-ios-and-ios-xe#Cisco_IOS-XE_Configuration_Example

If you need help, I will be able to help but following examples I think it will not be a big deal.

Thanks

PS: please don't forget to rate and mark as correct answer if this answered your question.