Wireshark usage: How to get stats on cisco router

I am new to wireshark and want to get some stats (like DHCP, ARP) on cisco router. When I telnet into the router using the broadcom port of my laptop, I only get the activity showing TELNET/TCP? Is there any way to get the router activity esp for E0/0?? Any pointers on wireshark usage will be highly appreciated.
totaramAsked:
Who is Participating?
 
mrwalker15Connect With a Mentor Commented:
Ok. I take you are on the same internal network but on different locations.

You will have to use RSPAN then.

Basically it is the same as a SPAN session but with the destination being on another switch.

You need to create a VLAN to carry the SPAN traffic and it must be available in both switches.

Router's Switch#configure terminal
Router's Switch(config)#
Router's Switch(config)#monitor session 1 source interface <router's interface>
Router's Switch(config)#monitor session 1 destination remote vlan <vlan id that you created>

Your switch#config t
Your switch#monitor session 1 source remote vlan <vlan id that you created>
Your switch#monitor session 1 destination interface <your interface>
0
 
RPPreacherCommented:
Actually netflow is more what you are looking for.

Scrutinizer is a free netflow analyzer.
http://www.plixer.com/products/free-netflow.php

Which Cisco router do you have?  I can help with the netflow set up or you can just google "netflow" and your router model.
0
 
mrwalker15Commented:
You could also set a SPAN port on you switch to send all the traffic from the routers port to your port.
0
The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

 
totaramAuthor Commented:
We have Cisco 2811, and are facing some issues with DHCP allocation from server. Just want to get the trace of the DHCP requests and responses. On google search, I came up @ Cisco IOS Netflow, is that what you are referring to? Prabably, we have to buy that from Cisco....
0
 
totaramAuthor Commented:
How do you put SPAN on switch port to go thru router to my laptop/PC port?
0
 
mrwalker15Commented:
What switch do you use?
0
 
mrwalker15Commented:
Also, are you connected to the same switch as the routers?
0
 
totaramAuthor Commented:
Cisco switch 2950, IOS 12.1(20)
0
 
mrwalker15Commented:
C2950#configure terminal
C2950(config)#
C2950(config)#monitor session 1 source interface <router's interface>
C2950(config)#monitor session 1 destination interface <laptop's interface>

http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml#topic5
0
 
totaramAuthor Commented:
mrwalker, I can not directly log in to switch, I can log in to router from my laptop/PC and then to switch. Is there any way to set the destination interface?
0
 
mrwalker15Commented:
is your machine physically connected to the same switch? if so, you have to assign the interface that your physically connected as the destination interface.
0
 
totaramAuthor Commented:
No, we are miles away from Router/switch. I telnet to the router.
0
 
totaramAuthor Commented:
Very good, thank you so much for your input,
0
 
totaramAuthor Commented:
The issue is closed.
0
All Courses

From novice to tech pro — start learning today.