07-18-2016 08:20 AM - edited 03-08-2019 06:40 AM
Is there a way to packet capture broadcast and multicasts on 3750X/E/G switches on a port so that I can remotely review the capture with wireshark after sending the pcap to a destination.
I know I can span a port locally and use wireshark to look at all the packets on a port but I don't see this same exact ability using the packet capture features. Specifically I do not see how you can packet capture layer 2 packets in a vlan that an individual port would see. So far everything I have read relates to IP packet traces and using IP access lists but what about tracing layer 2 only packets so that I can remotely view them. The reason I am asking because of issues that we have with PC network cards flooding networks with layer 2 broadcasts/multicast and creating storms.
If a packet capture on a 3750X can do this please give a quick example.
Thanks
Solved! Go to Solution.
07-18-2016 04:02 PM
Hi,
I think your best option is to span a port and capture the traffic that way.
Thanks
John
07-18-2016 04:02 PM
Hi,
I think your best option is to span a port and capture the traffic that way.
Thanks
John
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: