05-21-2018 07:21 AM - edited 03-01-2019 03:24 PM
How to capture LLDP packets?
Thank you very much.
05-21-2018 07:37 AM
You don't mention which platform you're using, but for the ASR9K, take a look at this Support Forums guide:
ASR9000/XR: How to use Port Spanning or Port Mirroring
You should be able to match LLDP traffic with a L2 ACL like this:
ethernet-services access-list LLDP 10 permit any any 0x88cc
05-21-2018 08:42 AM
Agreed that L2 ACL or SPAN would be easiest.
At the NP level we can look at show controller np counters and parse for LLDP, but that would only tell us if packets are coming in and getting punted or getting dropped. If they are getting dropped then we can do an NP capture to get the packets and dump the contents and convert to wireshark. The command on 5.3.x and greater is show controller np capture.
Thanks,
Sam
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide