Also keep in mind that dm raw only shows packets that hit the CPU. Mostly broadcast, multicast and packets with a destination of the switch itself.
I've mostly found it useful for tracking down rogue network equipment running spanning-tree and detecting a host sending out flow control PAUSE frames. -----Original Message----- From: [EMAIL PROTECTED] [mailto:foundry-nsp-bounces at puck.nether.net] On Behalf Of Stephen J. Wilcox Sent: Thursday, January 19, 2006 10:35 AM To: Gregory Edigarov Cc: foundry-nsp at puck.nether.net Subject: Re: [f-nsp] dm raw command output without looking, this should work for you: dm raw filter 0 in-port xx [whatever port you want to view] dm raw max 50 [limit to 50 packets] dm raw mode brief [one packet per line, brief] dm raw [go! type again to stop before you hit the max limit if you want] you need to delete the filter if you want to change the criteria, something like 'dm raw filter all none' .. you should be able to work it out from the cli help Steve On Thu, 19 Jan 2006, Gregory Edigarov wrote: > Hello, > > what is the full command sequence for dm raw subcommands? > I wanna look at the traffic as it flows through my router. I was told > that is done with "dm raw mode brief" command, but I cannot get an output. > Should I look at the console, or there is an option redirecting output > to where I want? > > Thank you. > > > _______________________________________________ foundry-nsp mailing list foundry-nsp at puck.nether.net http://puck.nether.net/mailman/listinfo/foundry-nsp
