Monitoring traffic

[ITexpert]

Hello Guys, @Francesco Molino @Julio E. Moisa @Joseph W. Doherty 

Is it possible on Cisco switches to watch the traffic for particular dest IP's from particular ports without using SPAN (Wireshark).

I just want to know the destination IP's from specific Port to make sure that traffic is exiting for that IP?

Thanks

[nazimkha]

Which is this Cisco Switch ?

For Catalyst here is the procedure
https://www.cisco.com/c/en/us/support/docs/switches/catalyst-3850-series-switches/117639-configure-wireshark-00.html

[ITexpert]

I have cisco 4506, 6504E, 3750G  , I believe they dont have embedded wireshark. 

this command is not working, #monitor capture 

Thanks 

[nazimkha]

It is not supported on the 3750 but may be supported on 4500E with SUP6L-E and SUP6E and catalyst 6500 with release 12.2(33)SXI and later
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/book/mpa.html

[Julio E. Moisa]

Hi

You could try using netflow but it is supported on robust layer 3 switches like 6500/6800 and I think on 9K, and routers. 

[Francesco Molino]

Hi

On cat 6k and cat 4k, where Wireshark isn't supported you can use debug netdr. Here the doc:
https://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/116475-technote-product-00.html

You also have netflow.
You can use erspan if you want to take the span over an IP network and not attaching the Wireshark pc directly to the switch (not supported on all devices). On the same way, you have rspan to send the span over a vlan and fetch on a closest

[ITexpert]

Hello Guys, @Julio E. Moisa@Francesco Molino  

Please guide me how to use netFlow, I never did before.

Thanks

[Julio E. Moisa]

Hi,

it will be a pleasure, what is your switch model and IOS version?

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/15-mt/nf-15-mt-book/get-start-cfg-nflow.html

[ITexpert]

Hello @Julio E. Moisa

I have 3750G, 4506, 6504E series switches.

Thanks

[Julio E. Moisa]

Thank you

Im almost sure the 3750G does not support netflow