[c-nsp] Nexus 7k ethanalyzer issues

Ross Vandegrift ross at kallisti.us
Wed Dec 10 14:52:46 EST 2014


Hello all,

Nexus 7k running 6.1(4a), trying to use ethanalyzer to troubleshoot an 
issue with gratuitous ARPs.  I'm seeing some weird behavior, and thought 
I'd see if these are known issues, or if there were general 
tips/feedback on using the feature.

First, sometimes it looks like the filtering doesn't work.  For example:
  rtr# ethanalyzer local interface inband capture-filter "arp" 
limit-captured-frames 1
  Capturing on inband
  2014-12-10 08:49:27.782393 192.0.2.243 -> 192.0.2.1 42202 > ssh [ACK] 
Seq=1 Ack=1 Win=65160 Len=0 TSV=4020203 TSER=339973843
  1 packet captured


Sometimes it crashes and doesn't do anything:
  rtr# ethanalyzer local interface inband capture-filter "arp" 
limit-captured-frames 1 limit-frame-size 128
  Capturing on inband
  tshark: Child capture process died: Segmentation violation


Sometimes it prints a header like this, but not always:
  NXOS Protocol
      NXOS VLAN: 0
      NXOS SOURCE INDEX: 2913
      NXOS DEST INDEX: 1025

Last, I don't see any VLAN tags in the capture.  I'd like to be able to 
filter based on ingress VLAN, but if the tags get stripped, I doubt that 
possible.

Thanks for any help,
Ross



More information about the cisco-nsp mailing list