Capturing RAW Traffic from a Cisco GSR 12000 series

[m-abooali]

Hi,

I have been given this task to capture traffic off two core routers of a provider, one GSR and one 7606 and send the capture traffic to a linux box, just like siffers or capturing traffic for monitoring purposes with IPS, etc.

The 7606 router has a switch blade in it and I was able to create an SPAN monitor session on it and capture customers traffic hitting the provider's core router 7600 out to the Internet but the GSR doesn't have switching blade and I am sure that I cannot create span monitor sessions on routers.

I was wondering if there is any other way to achive this goal?

hosestly, I cannot think of any other way to enable me do this on the GSR but, yet again there might be ways to do this that I am not aware of?

I really appreciate your thoughts??

Regards,

Mike

[arun kumar]

Hi Mike,

Probably you can try NetFlow feature available to capture the packets flowing on GSR. Chk the below URL:

http://www.cisco.com/en/US/technologies/tk543/tk812/technologies_white_paper0900aecd802a0eb9.html

HTH....

[m-abooali]

Hi Arun,

This is Mike from the other posting on the design I am dealing with.

Thanks for the link. I think it will do the trick except our provider's folks need to test it and let us know.

Thx,

Mike