ארכיון פוסטים עם התג "monitor session"

tcpdump examples

יום שני, 5 בספטמבר, 2011

tcpdump is a great tool for capturing traffic with a linux over the network,
before  making the capture make sure configure on the cisco router a monitor session with the following command example

monitor session 1 source int gig 7/1
monitor session 1 dest int gig 7/2

otherwise it wont work
(See this link for setting up SPAN port http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml)

After finsih with the SPAN port start enjoy tcpdump,

here is some necesery and good example for capture wimax R6 traffic with tcpdump

tcpdump 'udp port 2231' -i eth1 -w ~/pcap/pcap$TAG &

switches:

-i    interface to bind to

-w  save all packets to pcap file with wireshark format