capture packets on router

Unanswered Question
Oct 7th, 2007

I am trying to determine the source of traffic across a DS3 link.

I have applied an access-list inbound on the serial interface as shown:

access-list 102 permit tcp any any range 1 65535 log

access-list 102 permit udp any any range 1 65535 log

access-list 102 permit ip any any log

apply access-group 102 in s0/0

When viewing the log I am seeing this:

Oct 7 17:01:18.586: %SEC-6-IPACCESSLOGRL: access-list logging rate-limited or m

issed 38401 packets

Is there a limit set on the router log buffer?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
wilson_1234_2 Mon, 10/08/2007 - 13:52


Is it possible to use ethereal or wireshark to capture packets passing through the serial interface of a router from a workstation?

Richard Burts Mon, 10/08/2007 - 14:34


Capturing with wireshark (which is the new version of ethereal) works if the PC is connected to a SPAN port of a switch. But I do not believe that you can capture with wireshark for traffic on the serial port of a router.

I am not clear what you are looking for but I wonder if netflow could give you what you are looking for.



wilson_1234_2 Mon, 10/08/2007 - 17:00

Thanks Rick,

I have no span ports available, the only ones available are being used already on that switch.

I have seen netflow mentioned here before.

Is this something that needs to be purchased from Cisco?


This Discussion