[c-nsp] tcpdump on ios?

[Masood Ahmad Shah]

Ruter IP Traffic Export can be used only on switching platform, you can't
use with distributed platform; sniffing machine must be on same LAN and
should be in router arp table. Debug ip packet even using access-list
sometime sucks. I strongly suggest, free up a switch port and attach a
machine to it the one running packet sniffer tool. Mirror router switch port
to sniffer machine and sniff whatever you want t. 

Oh sorry for writing about Juniper; I was just working on it a while ago :) 

Regards,
Masood Ahmad Shah

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of David Prall
Sent: Saturday, January 12, 2008 2:19 AM
To: 'matthew zeier'; cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] tcpdump on ios?

Either Router IP Traffic Export (RITE)
http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cg/hsec_c
/part30/h_rawip.htm

Or debug condition ? then the appropriate debugs such as debug ip packet or
interface.

David

--
http://dcp.dcptech.com
  

> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net 
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of matthew zeier
> Sent: Friday, January 11, 2008 4:05 PM
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] tcpdump on ios?
> 
> 
> I'm trying to track down an issue and recall some method to watch 
> traffic going through a router based on an ACL.  Can't recall 
> the syntax 
> though.
> 
> help?
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/