Traffic Capture ISSUE!!!

Answered Question
Sep 3rd, 2009
User Badges:

I need to capture traffic on a voice vlan using wireshark. How do I get the switch to let me access that traffic with out it putting my PC on the Data vlan? Right now the switch is configured to only let cisco phones access the voice vlan. I also have bduguard enabled.

Correct Answer by Nicholas Matthews about 7 years 10 months ago

If you want the entire VLAN you won't get this information. If you just want the information for broadcast and unicast to the PC and phone, this should work without additional configuration.


If this is CUCM, you need to go to the phone webpage and enable "SPAN To PC Port" and then save and reset the phone. Settings->Device Settings->Ethernet Information->Span to PC port = true


Then it should work as described.



-nick

Correct Answer by Nicholas Matthews about 7 years 10 months ago

When you specify a port as a SPAN destination, it will not get an IP address. You will specify in the monitor session commands which VLANs you would like to send to that port.


Note: when SPANing a VLAN, you should either specify in or out. If you do 'both' (default) you'll get duplicate packets.



hth,

nick

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Correct Answer
Nicholas Matthews Thu, 09/03/2009 - 07:39
User Badges:
  • Red, 2250 points or more

When you specify a port as a SPAN destination, it will not get an IP address. You will specify in the monitor session commands which VLANs you would like to send to that port.


Note: when SPANing a VLAN, you should either specify in or out. If you do 'both' (default) you'll get duplicate packets.



hth,

nick

Charlie Mayes Thu, 09/03/2009 - 07:59
User Badges:

Hello Nick,


Is there way way to do this with the while the phone is plugged into the switch and the pc is plugged into the phone and still capture this traffic at the pc ?

Correct Answer
Nicholas Matthews Thu, 09/03/2009 - 10:21
User Badges:
  • Red, 2250 points or more

If you want the entire VLAN you won't get this information. If you just want the information for broadcast and unicast to the PC and phone, this should work without additional configuration.


If this is CUCM, you need to go to the phone webpage and enable "SPAN To PC Port" and then save and reset the phone. Settings->Device Settings->Ethernet Information->Span to PC port = true


Then it should work as described.



-nick

Actions

This Discussion