Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual page 730

Using Ethanalyzer
Step 4
Step 5
Step 6
Step 7
Step 8
Ethanalyzer does not capture data traffic that Cisco NX-OS forwards in the hardware.
Ethanalyzer uses the same capture filter syntax as tcpdump. For more information, see the following URL:
http://www.tcpdump.org/tcpdump_man.html
For information on the syntax of the display filter, see the following URL:
http://wiki.wireshark.org/DisplayFilters
This example shows captured data (limited to four packets) on the management interface:
switch# ethanalyzer local interface mgmt brief limit-captured-frames 4
Capturing on eth0
2005-01-25 07:18:08.997132 10.193.24.42 -> 10.200.0.103 TELNET Telnet Data ...
2005-01-25 07:18:09.166266 10.200.0.103 -> 10.193.24.42 TCP 1235 > telnet [ACK] Seq=0 Ack=19
Win=64129 Len=0
2005-01-25 07:18:09.166830 10.193.24.42 -> 10.200.0.103 TELNET Telnet Data ...
2005-01-25 07:18:09.376250 10.200.0.103 -> 10.193.24.42 TCP 1235 > telnet [ACK] Seq=0 Ack=99
Win=64049 Len=0
4 packets captured
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
684
Command or Action
switch# ethanalyzer local interface
interface limit-frame-size
switch# ethanalyzer local interface
interface capture-filter
switch# ethanalyzer local interface
interface display-filter
switch# ethanalyzer local interface
interface write
switch# ethanalyzer local read file
Purpose
Limits the length of the frame to capture.
Filters the types of packets to capture.
Filters the types of captured packets to display.
Saves the captured data to a file.
Opens a captured data file and analyzes it.
Troubleshooting
OL-16597-01