• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 747
  • Last Modified:

Need to sniff a serial port with ethereal

We have recently installed a Cisco 6509 switch with FlexWAN controller to handle our channelized serial lines from a T3.

Question:
We want to use ethereal to capture all packets going in and out of a serial WAN port.   Can that be done and how?

0
dalva
Asked:
dalva
  • 2
  • 2
1 Solution
 
Don JohnstonInstructorCommented:
I haven't done it with Ethereal but back when I used a Network General Sniffer, they had a serial "y" cable that let you monitor a V.35 line. Without something like that (and the capability of the software), you won't be able to sniff a serial line.
0
 
dalvaAuthor Commented:
We do not have physical serial lines just virtual serial lines riding on our T3.  I may have to call Cisco on this one unless there is an expert with another idea.
0
 
ngravattCommented:
yes, use the monitor options and mirror all the data to an available ethernet port.

command should look something like this.

monitor session 1 source int se0/0
monitor session 1 destination int eth0/0

though you are using sub intefaces (virtual serial lines), the data is still traversing the physical serial port.
0
 
Don JohnstonInstructorCommented:
I was under the impression that the "monitor session" command only works with LAN (ethernet) interfaces. I've never been able to get it to work with a serial interfaces before.
0
 
dalvaAuthor Commented:
I did not have the opportunity to apply the solution yet but plan at a future time.  I did a quick research on Cisco's site to confirm the solution appears like it may work.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now