Hello all,

Nexus 7k running 6.1(4a), trying to use ethanalyzer to troubleshoot an issue with gratuitous ARPs. I'm seeing some weird behavior, and thought I'd see if these are known issues, or if there were general tips/feedback on using the feature.

First, sometimes it looks like the filtering doesn't work.  For example:
rtr# ethanalyzer local interface inband capture-filter "arp" limit-captured-frames 1
 Capturing on inband
2014-12-10 08:49:27.782393 192.0.2.243 -> 192.0.2.1 42202 > ssh [ACK] Seq=1 Ack=1 Win=65160 Len=0 TSV=4020203 TSER=339973843
 1 packet captured


Sometimes it crashes and doesn't do anything:
rtr# ethanalyzer local interface inband capture-filter "arp" limit-captured-frames 1 limit-frame-size 128
 Capturing on inband
 tshark: Child capture process died: Segmentation violation


Sometimes it prints a header like this, but not always:
 NXOS Protocol
     NXOS VLAN: 0
     NXOS SOURCE INDEX: 2913
     NXOS DEST INDEX: 1025

Last, I don't see any VLAN tags in the capture. I'd like to be able to filter based on ingress VLAN, but if the tags get stripped, I doubt that possible.

Thanks for any help,
Ross

_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to