Sending Captures To Remote Ip Addresses; Displaying Captured Frames - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Configuring a Fabric Analyzer
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

Sending Captures to Remote IP Addresses

You must use the eth2 interface to capture control traffic on a supervisor module.
Caution
To capture remote traffic, use one of the following options:
•
•

Displaying Captured Frames

You can selectively view captured frames by using the display filters feature. For example, instead of
viewing all the frames from a capture, you may only want to view Exchange Link Protocol (ELP) request
frames. This feature only limits the captured view—it does not affect the captured or the saved frames.
Procedures to specify, use, and save display filters are already documented in the Ethereal website
(http://www.ethereal.com). Some examples of how you can use this feature are as follows:
•
•
•
•
•
Cisco MDS 9000 Family Fabric Manager Configuration Guide
66-20
The capture interface can be specified in Ethereal as the remote device:
rpcap://<ipaddress or switch hostname>/eth2
For example:
rpcap://cp-16/eth2
rpcap://17.2.1.1/eth2
The capture interface can be specified either in the capture dialog box or by using the -i option at
the command line when invoking Ethereal.
ethereal -i rpcap://<ipaddress|hostname>[:<port>]/<interface>
For example:
ethereal -i rpcap://172.22.1.1/eth2
or
ethereal -i rpcap://customer-switch.customer.com/eth2
For example, in a Windows 2000 setup, click Start on your desktop and select Run. In the
Note
resulting Run window, type the required command line option in the Open field.
To view all packets in a specified VSAN, use this expression:
mdshdr.vsan == 2
To view all SW_ILS frames, use this expression:
fcswils
To view class F frames, use this expression:
mdshdr.sof == SOFf
To view all FSPF frames, use this expression:
swils.opcode == HLO || swils.opcode == LSU || swils.opcode == LSA
To view all FLOGI frames, use this expression:
fcels.opcode == FLOGI
Chapter 66 Troubleshooting Your Fabric
OL-17256-03, Cisco MDS NX-OS Release 4.x