Telegram - . ? :)

4

Cisco, Cisco Embedded Packet Capture, , IOS 12.4.20T. , EPC , flash ftp/tftp , , , Wireshark.

, Embedded Packet Capture:

  • PCAP,
  • IPv4 IPv6 Cisco Express Forwarding

Cisco EPC , Capture Buffer( ) Capture Point ( )

 Capute Buffer  Capture Point

Capture buffer . Linear () Circular ():

  • Linear Capture Buffer ,
  • Circular Capture Buffer , ,

Capture Point , . :

  • IPv4 IPv6
  • CEF (Cisco Express Forwarding) Process-Switched
  • ( Fast Ethernet 0/0, Gigabit Ethernet 1/0)
  • : (in), (out)

Cisco Embedded Packet Capture

, FastEthernet 0/0 192.168.1.5 - wiki.merionet.ru 212.193.249.136

 Cisco Embedded Packet Capture

, . monitor capture buffer [] size[] [] . merionet_cap, 1024 (1 , ) .

Router#monitor capture buffer merionet_cap size 1024 linear

. 192.168.1.5 212.193.249.136. ACL. . , .

Router(config)#ip access-list extended web-traffic
Router(config-ext-nacl)#permit ip host 192.168.1.5 host 212.193.249.136
Router(config-ext-nacl)#permit ip host 212.192.249.136 host 192.168.1.5

, , . ACL, . access-list, monitor capture buffer [_] filter access-list [_ACL]

Router#monitor capture buffer merionet_cap filter access-list web-traffic

, . FastEthernet 0/0, , . .

ip cef , Cisco Express Forwarding. ip cef , IPv4 CEF is not enabled.

monitor capture point ip cef [_] [] [] .

Router#monitor capture point ip cef MNpoint FastEthernet0/0 both

monitor capture point associate [_][_] . .

Router#monitor capture point associate MNpoint merionet_cap

monitor capture point start [_] .

Router# monitor capture point start MNpoint

monitor capture point stop [_] .

Router# monitor capture point stop MNpoint

:

  • show monitor capture buffer
  • show monitor capture point
  • show monitor capture buffer [_]
  • show monitor capture buffer [_] dump

(, WireShark) . , : flash: ( ), ftp, tftp, http, https, scp .

monitor capture buffer[_] export [] .

Router#monitor capture buffer merionet_cap export tftp://192.168.1.10/capture.pcap

capture.pcap TFTP , .


?


: