Turning Off DNS Lookups When Performing Dataplane Packet Capture?

Reply
Highlighted
L2 Linker

Turning Off DNS Lookups When Performing Dataplane Packet Capture?

Is it possible to turn off DNS lookups when performing packet captures on the dataplane?

 

I was hoping to run some pcaps, without taking up too many unnecessary resources through DNS lookups.

 

Thanks.


Accepted Solutions
Highlighted
Cyber Elite

Good Afternoon

 

It is quite simple to do a packet capture trace from CLI and exclude DNS, if I understand your question.

 

view-pcap follow yes no-dns-lookup yes

 

I believe you are looking for the no-dns-lookup option.

this is be done by CLI only, not from the GUI.

 

Does this help?

 

 

Help the community: Like helpful comments and mark solutions

View solution in original post


All Replies
Highlighted
L7 Applicator

you can narrow down your packet-diag filters so you only capture what you're trying to troubleshoot (I'd recommend it, over disabling functionality because your filter is too generic)
Tom Piens - PANgurus.com
Like my answer? check out my book! amazon.com/dp/1789956374
Highlighted
L2 Linker

That's true. I can do that.

 

But the other issue I have is that I would really like to see the IP addresses, in the default output, at times, and not the DNS name.

 

Is it even possible to turn off the DNS lookups?

 

Clarke Morledge

William & Mary 

Highlighted
Cyber Elite

Hello,

The PCAPs will have the IPs listed. As for disabling, I'm not sure and dont recommend it.

 

Regards,

Highlighted
L2 Linker

I should have clarified what I was asking for. 

 

The quick and easy pcap viewing command that I found was this:

 

view-pcap filter-pcap name_of_file.pcap

 

When running this command, the default is to give you the DNS lookups.  Otherwise, I am not sure how to just look at the source/destination IP addresses, without offloading the pcap.  So, I was curious to know if there was some mechanism to view the pcap, like this, without having to show the DNS lookup information.

 

Thanks.

 

 

Highlighted
Cyber Elite

Good Afternoon

 

It is quite simple to do a packet capture trace from CLI and exclude DNS, if I understand your question.

 

view-pcap follow yes no-dns-lookup yes

 

I believe you are looking for the no-dns-lookup option.

this is be done by CLI only, not from the GUI.

 

Does this help?

 

 

Help the community: Like helpful comments and mark solutions

View solution in original post

Highlighted
L2 Linker

Thanks, Steve.  We have a winner.  I appreciate your help.  

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!