Network technologies and trends » Wireshark http://itknowledgeexchange.techtarget.com/network-technologies Wed, 15 May 2013 18:52:38 +0000 en-US hourly 1 Cisco Nexus Switches comes with built-in Wireshark http://itknowledgeexchange.techtarget.com/network-technologies/cisco-nexus-switches-comes-with-built-in-wireshark/ http://itknowledgeexchange.techtarget.com/network-technologies/cisco-nexus-switches-comes-with-built-in-wireshark/#comments Tue, 12 Oct 2010 05:49:16 +0000 Yasir Irfan http://itknowledgeexchange.techtarget.com/network-technologies/cisco-nexus-switches-comes-with-built-in-wireshark/ Wireshark is a great open source packet analyzer used for network troubleshooting installed in our laptops or desktops. What if you want to troubleshoot a problem in a Cisco Nexus 7000 Switch and your laptop doesn’t have Wireshark installed?  No worries Cisco Systems did a great job as the Cisco Nexus 7000 Switch comes with a built-in Wireshark, amazing isn’t it!

Cisco simply based their Cisco NX-OS Ethanalyzer on the command-line (cli) version of Wireshark, also known as T-shark. The syntax is very similar to tcpdump in linux, as demonstrated below with the following command

VDC-Admin# ethanalyzer local interface inband capture-filter test

In upcoming posts I will try to provide some tips and some useful commonly used commands  in Cisco Nexus 7000 Series Switches.

]]> http://itknowledgeexchange.techtarget.com/network-technologies/cisco-nexus-switches-comes-with-built-in-wireshark/feed/ 0 How to configure SPAN(Switched Port Analyzer ) feature in a Cisco Catalyst Switch http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-spanswitched-port-analyzer-feature-in-a-cisco-catalyst-switch/ http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-spanswitched-port-analyzer-feature-in-a-cisco-catalyst-switch/#comments Tue, 02 Dec 2008 07:30:23 +0000 Yasir Irfan http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-spanswitched-port-analyzer-feature-in-a-cisco-catalyst-switch/ It’s quite important for Network Engineers and an essential network troubleshooting technique to utilize the ability of Cisco Catalyst Switches to mirror the traffic and send it to a sniffer for analysis. All Cisco Catalyst Switches support the Switched Port Analyzer (SPAN) feature. The SPAN copies traffic from the specified interface or VLANs and mirrors this traffic to a specified destination interface (SPAN interface).  Then you can connect the PC with a sniffing tool (Wireshark) installed on the destination SPAN interface to capture all the mirrored traffic.Let’s see how to configure the SPAN in Cisco Catalyst Switches. SPAN To enable the switch SPAN mirroring feature configure the following on the catalyst switch: Configuration Example – Monitoring traffic from a specific interfaceITKEAS01#configure tITKEAS01(config) monitor session 1 source interface gigabitEthernet 0/5

ITKEAS01(config)#monitor session 1 destination interface gigabitEthernet 0/10 

The  above configuration will capture all traffic from interface gigabitEthernet 0/5  and send it to SPAN port interface gigabitEthernet 0/10 

Configuration Example – Monitoring an entire VLAN traffic
ITKEAS01(config)#monitor session 1 source vlan 100
ITKEAS01(config) monitor session 1 destination interface gigabitEthernet 0/10 The  above configuration will capture all traffic of VLAN 100 and send it to SPAN port interface gigabitEthernet 0/10

Use  show monitor session 1 to verify your configuration.

]]> http://itknowledgeexchange.techtarget.com/network-technologies/how-to-configure-spanswitched-port-analyzer-feature-in-a-cisco-catalyst-switch/feed/ 0