0

I need to capture traffic in local VLAN on Nexus9000K, start wireshark on my laptop, ip address of this laptoop is 9.9.9.9. Also I want to capture only icmp and src host 10.0.0.0/24. I try to do this:

switch(config)# monitor session 10 type erspan-source ?
switch(config-erspan-src)# erspan-id 10
switch(config-erspan-src)# source interface ethernet 1/1
switch(config-erspan-src)# destination ip 9.9.9.9
switch(config-erspan-src)# vrf default
switch(config-erspan-src)# exit

switch(config)# ip access-list match_10_pkts
switch(config-acl)# permit icmp 10.0.0.0 0.0.0.255 any

switch(config-acl)# vlan access-map erspan_filter 5
switch(config-access-map)# match ip address match_10_pkts
switch(config-access-map)# action forward
switch(config-access-map)# exit

switch(config)#  monitor session 10 type erspan-source
switch(config-erspan-src)# filter access-group erspan_filter
**ERROR: ACL/VLAN filter not supported for Tx direction.**

How can I do this capture in right way? Or this can be achived by classic SPAN technology only?

1

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.