×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Need Traffic Analyzer - Packet Capture from CISCO

Answered Question
Aug 25th, 2015
User Badges:

I am using cisco router, i have created sub interfaces, i am using public IPs - Now i need to check the traffic flow...

I need the below details for the same.

1.Source IP

2.Source Port

3.Destination IP

4.Destination Port

5.Date and Time of Access

I Want to capture the above details from the cisco Router.

What is the solution for this, Can cisco help me in this.

Correct Answer by Mark Malone about 1 year 11 months ago

depending what your hardware/ios is you will need to check what features you have available and what it supports

Most routers are limited that they cannot support SPAN but 3845s can or you could look into using the feature RITE

Some routers also support monuitor capture buffer

http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp

https://supportforums.cisco.com/document/29616/utilizing-new-packet-capture-feature

http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/10570-41.html

http://www.cisco.com/c/en/us/td/docs/ios/12_4t/12_4t11/ht_rawip.html

 

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Mark Malone Tue, 08/25/2015 - 01:30
User Badges:
  • Purple, 4500 points or more
  • Cisco Designated VIP,

    2017 LAN

depending what your hardware/ios is you will need to check what features you have available and what it supports

Most routers are limited that they cannot support SPAN but 3845s can or you could look into using the feature RITE

Some routers also support monuitor capture buffer

http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp

https://supportforums.cisco.com/document/29616/utilizing-new-packet-capture-feature

http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/10570-41.html

http://www.cisco.com/c/en/us/td/docs/ios/12_4t/12_4t11/ht_rawip.html

 

Actions

This Discussion