Cisco Nexus 5000 Series Switch CLI Software Configuration Guide (OL-16597-01, July 2009)

PurposeCommand or Action

Limits the length of the frame to capture.switch# ethanalyzer local interface

interface limit-frame-size

Step 4

Filters the types of packets to capture.switch# ethanalyzer local interface

interface capture-filter

Step 5

Filters the types of captured packets to display.switch# ethanalyzer local interface

interface display-filter

Step 6

Saves the captured data to a file.switch# ethanalyzer local interface

interface write

Step 7

Opens a captured data file and analyzes it.

switch# ethanalyzer local read file

Step 8

Ethanalyzer does not capture data traffic that Cisco NX-OS forwards in the hardware.

Ethanalyzer uses the same capture filter syntax as tcpdump. For more information, see the following URL:

http://www.tcpdump.org/tcpdump_man.html

For information on the syntax of the display filter, see the following URL:

http://wiki.wireshark.org/DisplayFilters

This example shows captured data (limited to four packets) on the management interface:

switch# ethanalyzer local interface mgmt brief limit-captured-frames 4

Capturing on eth0

2005-01-25 07:18:08.997132 10.193.24.42 -> 10.200.0.103 TELNET Telnet Data ...

2005-01-25 07:18:09.166266 10.200.0.103 -> 10.193.24.42 TCP 1235 > telnet [ACK] Seq=0 Ack=19

Win=64129 Len=0

2005-01-25 07:18:09.166830 10.193.24.42 -> 10.200.0.103 TELNET Telnet Data ...

2005-01-25 07:18:09.376250 10.200.0.103 -> 10.193.24.42 TCP 1235 > telnet [ACK] Seq=0 Ack=99

Win=64049 Len=0

4 packets captured

Cisco Nexus 5000 Series Switch CLI Software Configuration Guide

684 OL-16597-01

Troubleshooting

Using Ethanalyzer