topic Re: How perform a packet capture with a filter for subnet or a vlan-id in General Topics

How perform a packet capture with a filter for subnet or a vlan-id

Bart_Jocque — Mon, 26 Dec 2011 09:40:55 GMT

Hi,

I need capture some traffic for a specific subnet ( or vlan tag) .

With "debug dataplane packet-diag set filter match" I can only put a single ip's but not subnet.
Neither a vlan-tag can be added in a filter.

Is there any way to do this ?

Tx.

Re: How perform a packet capture with a filter for subnet or a vlan-id

Retired Member — Wed, 28 Dec 2011 02:58:23 GMT

If you have vlans assigned to unique sub-interfaces then you can use sub-interface name in your packet-diag filter. However, I should point out that our packet-diag feature is meant as a debugging tool. The filters are meant to key on very specific traffic to debug specific traffic problems. It is not meant to be a true pcap capture tool. There can be a performance and stability penalty if you are capturing too much traffic in packet-capture in packet-diag mode. Ideally it would be better to do port-mirror on the switch if you wish to capture entire subnets or specific vlans.

Regards

-Richard

Re: How perform a packet capture with a filter for subnet or a vlan-id

Bart_Jocque — Mon, 02 Jan 2012 16:08:29 GMT

Hi Richard,

thanks for your update, but it seems like that only hardware interfaces are supported ( no logical interfaces neither subinterfaces. )

so still no solution for this.

Re: How perform a packet capture with a filter for subnet or a vlan-id

bpappas — Thu, 05 Jan 2012 03:45:25 GMT

@Bart

if you wish to see this debugging feature enhanced you need to talk to your sales team and have them file a feature request on your behalf. The current features do not support the functionality that you are looking for.

-Benjamin