Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Bronze

Question Re: ERSPAN

Hi All,

I'm using ERSPAN on my Nexus 5548 switches. Source: Interfaces on Nexus, destination: An Ubuntu box running Wireshark.

I'm able to capture packets with this method, but wireshark gives me TONS of expert errors saying: TCP Ack'd lost segment. This normal? My capture sources on the nexus is a vPC, so I should be getting traffic from both sides fo the VPC. Could it be lost packets at the NIC level? Anyway to tell?

2 REPLIES
Bronze

Question Re: ERSPAN

Well I may have answered my own question. I told wireshark to limit packet sizes to 100 bytes, no more Expert errors.

Bronze

Question Re: ERSPAN

Ok, spoke too soon. Still have errors. How can i see if it's a NIC issue? My host running wireshark is Ubuntu 10.04 LTS 64-bit. I have set MTU on my ethernet interface up to 1700 and set MTU in ERSPAN sessio to 1518, max it will allow.

264
Views
0
Helpful
2
Replies
CreatePlease to create content