Is there a way to view a packet capture that was performed on a router using
the ip traffic export command?
The only way I have been able to view the trace is by uploading to a tftp
server and viewing in wireshark. If I use the following commands:
traffic-export interface fa0/1 copy flash:test.pcap
more test.pcap
I can see the contents of the pcap file, but it is a binary file, so I just
see the hex code for the file.
Is there a command to export captured data into a text format?
Will I be able to copy to a tftp server and view with wireshark in the
actual lab?
Is there a computer in the lab hooked up to the 3560 to perform a span in
the lab and capture with wireshark?
I love the capture functionality on the firewalls, as you can view the
contents of the capture right on the firewall itself.
I guess you can also use a debug ip packet ACL command in the lab, or use
net flow or ip accounting for troubleshooting, but nothing beats a packet
capture!
Maybe my strategy is wrong as well. In the real world, I use captures to
verify that packets are getting to where they are supposed to go. This is
always my second step (first being to look at logs, especially on firewalls
for denies). Should a train myself to rely less on captures?
Thanks for any advice!
