10-29-2014 03:31 PM - edited 03-18-2019 03:35 AM
Does anyone have a good set of instructions on how to do a full packet capture on an MXP endpoint.
I would love to do something that I can open directly in Wireshark.
We are looking to verify that the DSCP markings are being sent and received on the UDP traffic that is being sent and received from an MXP.
I have all the DSCP settings in the MXP configured,,, but I want to verify that the markings are surviving end to end.
Does it require Root access?
Can I see that in a log file rather than a full packet capture?
We use the packet capture in the TC7.1 on a regular bases and is works great... wish they would add that to the MXP web interface
Thanks
Solved! Go to Solution.
10-29-2014 04:01 PM
There is no way to handle that direly on an MXP endpoint.
So you would need a switch which supports a monitor mode (ok you have to
trust the switch to show what you want to see) or some other capturing
device which you can inject in the path.
Good success.
If this post was helpful please rate this post with the stars below!
Please remember to rate helpful responses and identify
10-29-2014 04:01 PM
There is no way to handle that direly on an MXP endpoint.
So you would need a switch which supports a monitor mode (ok you have to
trust the switch to show what you want to see) or some other capturing
device which you can inject in the path.
Good success.
If this post was helpful please rate this post with the stars below!
Please remember to rate helpful responses and identify
10-29-2014 08:44 PM
Been trying to work out how to do this on SX/C-series running TC7.2.x where there's no root access. Would it work with the "Remote Support User" account - or is it something I've missed in the admin account?
/jens
10-29-2014 09:29 PM
Hi Jens,
On a SX/C running recent firmware, in the Web Interface, go to Diagnostics / Log Files.
From there you "Start Extended Logging" to generate a packet capture.
But, if you really want to use the "remotesupport" account, you can do a tcpdump from the shell in a similar way you used to as "root".
Wayne
--
Please remember to rate respoinses and to mark your question as answered if appropriate.
Please remember to mark helpful responses and to set your question as answered if appropriate.
10-29-2014 09:56 PM
Thanks Wayne, never occurred to me to do this from the web gui, doesn't seem right somehow. ;)
/jens
10-29-2014 10:11 PM
Nope, but they're pushing more and more things that way and less and less is available from the command line.
Makes it nice and easy to grab a quick capture - but doesn't allow filtering at the point of capture as the old way did.
Wayne
--
Please remember to rate responses and to mark your question as answered if appropriate.
Please remember to mark helpful responses and to set your question as answered if appropriate.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide