Cisco Nexus 1000V Troubleshooting Manual page 254

Using Ethanalyzer
S e n d d o c u m e n t c o m m e n t s t o n e x u s 1 k - d o c f e e d b a c k @ c i s c o . c o m .
Table 26-1
Command
switch# ethanalyzer local sniff-interface
interface write
switch# ethanalyzer local read file
Ethanalyzer does not capture data traffic that Cisco NX-OS forwards in the hardware. Ethanalyzer uses
the same capture filter syntax as tcpdump. For more information, see the following URL:
http://www.tcpdump.org/tcpdump_man.html
For information about the syntax of the display filter, see the following URL:
http://wiki.wireshark.org/DisplayFilters
This example shows captured data (limited to four packets) on the management interface:
switch# ethanalyzer local sniff-interface mgmt limit-captured-frames 4
Capturing on eth1
2012-10-01 19:15:23.794943 10.78.110.241 -> 72.163.145.51 SSH Encrypted response packet
len=64
2012-10-01 19:15:23.796142 10.78.110.241 -> 72.163.145.51 SSH Encrypted response packet
len=144
2012-10-01 19:15:23.796608 10.78.110.241 -> 72.163.145.51 SSH Encrypted response packet
len=144
2012-10-01 19:15:23.797060 10.78.110.241 -> 72.163.145.51 SSH Encrypted response packet
len=144
4 packets captured
switch#
For more information about Wireshark, see the following URL:
Cisco Nexus 1000V Troubleshooting Guide, Release 4.2(1)SV2(2.1)
26-2
Ethanalyzer Commands Used for Configuring
Purpose
Saves the captured data to a file.
Opens a captured data file and analyzes it.
http://www.wireshark.org/docs/
Chapter 26 Ethanalyzer
OL-28795-01