07-18-2016 08:20 AM - edited 03-08-2019 06:40 AM
Is there a way to packet capture broadcast and multicasts on 3750X/E/G switches on a port so that I can remotely review the capture with wireshark after sending the pcap to a destination.
I know I can span a port locally and use wireshark to look at all the packets on a port but I don't see this same exact ability using the packet capture features. Specifically I do not see how you can packet capture layer 2 packets in a vlan that an individual port would see. So far everything I have read relates to IP packet traces and using IP access lists but what about tracing layer 2 only packets so that I can remotely view them. The reason I am asking because of issues that we have with PC network cards flooding networks with layer 2 broadcasts/multicast and creating storms.
If a packet capture on a 3750X can do this please give a quick example.
Thanks
Solved! Go to Solution.
07-18-2016 04:02 PM
Hi,
I think your best option is to span a port and capture the traffic that way.
Thanks
John
07-18-2016 04:02 PM
Hi,
I think your best option is to span a port and capture the traffic that way.
Thanks
John
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide