Solved

Wireshark usage: How to get stats on cisco router

Posted on 2008-10-29
15
941 Views
Last Modified: 2013-12-07
I am new to wireshark and want to get some stats (like DHCP, ARP) on cisco router. When I telnet into the router using the broadcom port of my laptop, I only get the activity showing TELNET/TCP? Is there any way to get the router activity esp for E0/0?? Any pointers on wireshark usage will be highly appreciated.
0
Comment
Question by:totaram
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 7
15 Comments
 
LVL 20

Expert Comment

by:RPPreacher
ID: 22834096
Actually netflow is more what you are looking for.

Scrutinizer is a free netflow analyzer.
http://www.plixer.com/products/free-netflow.php

Which Cisco router do you have?  I can help with the netflow set up or you can just google "netflow" and your router model.
0
 
LVL 3

Expert Comment

by:mrwalker15
ID: 22834123
You could also set a SPAN port on you switch to send all the traffic from the routers port to your port.
0
 

Author Comment

by:totaram
ID: 22834297
We have Cisco 2811, and are facing some issues with DHCP allocation from server. Just want to get the trace of the DHCP requests and responses. On google search, I came up @ Cisco IOS Netflow, is that what you are referring to? Prabably, we have to buy that from Cisco....
0
Guide to Performance: Optimization & Monitoring

Nowadays, monitoring is a mixture of tools, systems, and codes—making it a very complex process. And with this complexity, comes variables for failure. Get DZone’s new Guide to Performance to learn how to proactively find these variables and solve them before a disruption occurs.

 

Author Comment

by:totaram
ID: 22834317
How do you put SPAN on switch port to go thru router to my laptop/PC port?
0
 
LVL 3

Expert Comment

by:mrwalker15
ID: 22834329
What switch do you use?
0
 
LVL 3

Expert Comment

by:mrwalker15
ID: 22834354
Also, are you connected to the same switch as the routers?
0
 

Author Comment

by:totaram
ID: 22834357
Cisco switch 2950, IOS 12.1(20)
0
 
LVL 3

Expert Comment

by:mrwalker15
ID: 22834377
C2950#configure terminal
C2950(config)#
C2950(config)#monitor session 1 source interface <router's interface>
C2950(config)#monitor session 1 destination interface <laptop's interface>

http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml#topic5
0
 
LVL 3

Expert Comment

by:mrwalker15
ID: 22834405
0
 

Author Comment

by:totaram
ID: 22835489
mrwalker, I can not directly log in to switch, I can log in to router from my laptop/PC and then to switch. Is there any way to set the destination interface?
0
 
LVL 3

Expert Comment

by:mrwalker15
ID: 22835571
is your machine physically connected to the same switch? if so, you have to assign the interface that your physically connected as the destination interface.
0
 

Author Comment

by:totaram
ID: 22835652
No, we are miles away from Router/switch. I telnet to the router.
0
 
LVL 3

Accepted Solution

by:
mrwalker15 earned 125 total points
ID: 22835763
Ok. I take you are on the same internal network but on different locations.

You will have to use RSPAN then.

Basically it is the same as a SPAN session but with the destination being on another switch.

You need to create a VLAN to carry the SPAN traffic and it must be available in both switches.

Router's Switch#configure terminal
Router's Switch(config)#
Router's Switch(config)#monitor session 1 source interface <router's interface>
Router's Switch(config)#monitor session 1 destination remote vlan <vlan id that you created>

Your switch#config t
Your switch#monitor session 1 source remote vlan <vlan id that you created>
Your switch#monitor session 1 destination interface <your interface>
0
 

Author Closing Comment

by:totaram
ID: 31511319
Very good, thank you so much for your input,
0
 

Author Comment

by:totaram
ID: 22864593
The issue is closed.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In the hope of saving someone else's sanity... About a year ago we bought a Cisco 1921 router with two ADSL/VDSL EHWIC cards to load balance local network traffic over the two broadband lines we have, but we couldn't get the routing to work consi…
Lithium-ion batteries area cornerstone of today's portable electronic devices, and even though they are relied upon heavily, their chemistry and origin are not of common knowledge. This article is about a device on which every smartphone, laptop, an…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question