Sniffer Logs

Unanswered Question
Aug 22nd, 2006
User Badges:

Hi All,

When i sniff a serial T1 line using Sniffer Book.i see only frames..what could be the reason i see only frames ?

we use mgx to terminate the spans.

Actually i want to check for the source and destination ip address.

Thanks in advance


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
jackyoung Tue, 08/22/2006 - 18:25
User Badges:
  • Gold, 750 points or more

As I rememeber, there is a software come w/ the Sniffer can interpert the output log to read-able message.

Hope this helps.

o.hassairi Wed, 08/23/2006 - 00:20
User Badges:

normally it s an option: capture all frame or just layer2 header.

any way you can use the net-flow feature to capture details about layer3/4.

router#configure terminal

router-2621(config)#interface serial0

router-2621(config-if)#ip route-cache flow


router-2621(config)#ip flow-export destination 9996

router-2621(config)#ip flow-export source FastEthernet 0/1

router-2621(config)#ip flow-export version 5

router-2621(config)#ip flow-cache timeout active 1

then you should use some free software that can capture netflow packets like

kr_madan Wed, 08/23/2006 - 03:10
User Badges:

Hi Jackyoung,

Thanks for the reply.

I have checked the logs in the sniffer book software.

But in our case we enabled mux on the Multilink this a reason that we are not able to see packet.



jackyoung Wed, 08/23/2006 - 19:20
User Badges:
  • Gold, 750 points or more

What I think the issue is where do you probe the link, before the mux or after the mux. If before the mux, it should able to monitor the link.

I am sorry that I did not try it, so I can't help too much.

Did you check w/ the Sniffer provider, they should have more instruction in this case.

Hope this helps.


This Discussion