09-18-2018 06:22 AM - edited 03-08-2019 04:11 PM
Hi
I'm troubleshooting a problem with a host connected to my Nexus 56128. I would like to do a packet capture of the data going to that host. Is there an easy way to grap a .pcap file of this data from the switch?
thanks
Dan
09-18-2018 12:56 PM
you can use local tool inside switch to capture.
09-20-2018 05:05 AM
Hi Balaji!
it appears that you can only capture control plane data with that tool. What I want to do is capture packets on the data plane from host to host.
Any thoughts on that?
Thanks
Dan
09-20-2018 05:42 AM
Hey Dan,
You have 2 ways to accomplish this, the first is a classic monitor session where you mirror the traffic from one port(so the one where you host is connected) to a second port where you might have a sniffer attached(e.g a PC with wireshark running, or a linux box with tcpdump).
The second option is to use ELAM, this will not give you the full picture on the packets passing though as it will capture only a specific subset of traffic previously defined by a trigger with a filter.
You can find more details on ELAM here:
https://clnv.s3.amazonaws.com/2015/usa/pdf/BRKDCT-3100.pdf
and on SPAN/monitor session here:
HTH,
ADP
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide