Cisco nexus 5000 series Cli Configuration Manual page 646

Using Ethanalyzer
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m
Command
ethanalyzer local interface interface
display-filter
ethanalyzer local interface interface
write
ethanalyzer local read file
Ethanalyzer does not capture data traffic that Cisco NX-OS forwards in the hardware.
Ethanalyzer uses the same capture filter syntax as tcpdump. For more information, see the following
URL:
http://www.tcpdump.org/tcpdump_man.html
For information on the syntax of the display filter, see the following URL:
http://wiki.wireshark.org/DisplayFilters
This example shows captured data (limited to four packets) on the management interface:
switch# ethanalyzer local interface mgmt brief limit-captured-frames 4
Capturing on eth0
2005-01-25 07:18:08.997132 10.193.24.42 -> 10.200.0.103 TELNET Telnet Data ...
2005-01-25 07:18:09.166266 10.200.0.103 -> 10.193.24.42 TCP 1235 > telnet [ACK] Seq=0
Ack=19 Win=64129 Len=0
2005-01-25 07:18:09.166830 10.193.24.42 -> 10.200.0.103 TELNET Telnet Data ...
2005-01-25 07:18:09.376250 10.200.0.103 -> 10.193.24.42 TCP 1235 > telnet [ACK] Seq=0
Ack=99 Win=64049 Len=0
4 packets captured
This example shows detailed captured data for one HSRP packet:
switch(config)# ethanalyzer local interface mgmt capture-filter "tcp port 23"
limit-captured-frames 1
Capturing on eth0
Frame 1 (60 bytes on wire, 60 bytes captured)
Arrival Time: Jan 25, 2005 08:49:49.250719000
[Time delta from previous captured frame: 1106642989.250719000 seconds]
[Time delta from previous displayed frame: 1106642989.250719000 seconds]
[Time since reference or first frame: 1106642989.250719000 seconds]
Frame Number: 1
Frame Length: 60 bytes
Capture Length: 60 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:tcp]
Ethernet II, Src: 00:1a:a2:d2:d7:00 (00:1a:a2:d2:d7:00), Dst: 00:0d:ec:6d:81:00
(00:0d:ec:6d:81:00)
Destination: 00:0d:ec:6d:81:00 (00:0d:ec:6d:81:00)
Source: 00:1a:a2:d2:d7:00 (00:1a:a2:d2:d7:00)
Type: IP (0x0800)
Trailer: 000000000000
Internet Protocol, Src: 10.200.0.103 (10.200.0.103), Dst: 10.193.24.42 (10.193.24.42)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
1-4
Address: 00:0d:ec:6d:81:00 (00:0d:ec:6d:81:00)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
Address: 00:1a:a2:d2:d7:00 (00:1a:a2:d2:d7:00)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
Purpose
Filters the types of captured packets to display.
Saves the captured data to a file.
Opens a captured data file and analyzes it.
Chapter 1 Troubleshooting
OL-16597-01