Packet Capture from Cisco Routers

[JustForVoice_2]

Hi all,

I am trying to find some method to troubleshoot problems using wireshark. what I am looking for is:

Configure Cisco router to capture the packets and store the output on the flash of the router. later on I can access the router and download if from the flash using

copy flash tftp.

Is there any way to do this?

is  there any similar method?

I read about:

Router IP Traffic Export Packet Capture Enhancements

http://www.cisco.com/en/US/docs/ios/12_4t/12_4t11/ht_rawip.html

but I found the follwoing limitations:

• The MAC address of the  device that is receiving the exported traffic must be on the same VLAN  or directly connected to one of the router interfaces. (Use the show arp command to determine the MAC address of device that is directly connected to an interface.)

• The  outgoing interface for exported traffic must be Ethernet (10/100/1000).  (Incoming (monitored) traffic can traverse any interface.)

As you know, it is very difficult to access the router or to be in the same subnet if it is production router.

[cadet alain]

Hi,

you can try this:http://www.cisco.com/en/US/docs/ios/netmgmt/configuration/guide/nm_packet_capture_ps6441_TSD_Products_Configuration_Guide_Chapter.html

Regards.

Alain

[JustForVoice_2]

Thank you too much.

it looks very helpful, I will try to test and see if it is what I need.