Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Packet Capture from Cisco Routers

Hi all,

I am trying to find some method to troubleshoot problems using wireshark. what I am looking for is:

Configure Cisco router to capture the packets and store the output on the flash of the router. later on I can access the router and download if from the flash using

copy flash tftp.

Is there any way to do this?

is  there any similar method?

I read about:

Router IP Traffic Export Packet Capture Enhancements

http://www.cisco.com/en/US/docs/ios/12_4t/12_4t11/ht_rawip.html

but I found the follwoing limitations:

  • The MAC address of the  device that is receiving the exported traffic must be on the same VLAN  or directly connected to one of the router interfaces. (Use the show arp command to determine the MAC address of device that is directly connected to an interface.)

  • The  outgoing interface for exported traffic must be Ethernet (10/100/1000).  (Incoming (monitored) traffic can traverse any interface.)

As you know, it is very difficult to access the router or to be in the same subnet if it is production router.

2 REPLIES
Purple

Packet Capture from Cisco Routers

New Member

Packet Capture from Cisco Routers

Thank you too much.

it looks very helpful, I will try to test and see if it is what I need.

939
Views
5
Helpful
2
Replies
CreatePlease login to create content