Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

sniff packets

Hello dear all,

I have some unwanted traffic on my switch port.

how can I findout IP addresses of the generator of these trafics?

thanks

4 REPLIES
Cisco Employee

Re: sniff packets

Hi Friend,

Which switch you are having on which you want to sniff the ports. You can configure SPAN on your switch and sniff the ports which ever you want.

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3750/12225see/scg/swspan.htm#wp1036816

EtherReal sniffer software will be one good option which you can have on your destination machine to capture traffic.

HTH

Ankur

*Pls rate all helpfull post

New Member

Re: sniff packets

ps... etherreal is now wireshark

Re: sniff packets

Hi ,

You can span your switchport traffic to another port and connect a pc with a sniffer or ethereal software to find the traffic

http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml#topic5

Hope this helps

regards

vanesh k

Silver

Re: sniff packets

You can use the poor mans sniffer.. If your traffic goes through a layer 3 interface then you can enable route cache flow on the interface. capture the traffic, then do a show cache flow. it will show you the ip addresses source/destinations flows through the interface and ports they are using..

259
Views
7
Helpful
4
Replies
CreatePlease to create content