Agree 100% with the inbuilt pcap! Its great :)
Only thing to watch for is if you are saving the capture to flash; you need to be careful that it does not fill it up because you can capture a damn lot of data... Cheers, Matt CCIE #22386 CCSI #31207 On 18 September 2010 03:31, Tyson Scott <[email protected]> wrote: > Would I recommend it if there was? > > > > Regards, > > > > Tyson Scott - CCIE #13513 R&S, Security, and SP > > Managing Partner / Sr. Instructor - IPexpert, Inc. > > Mailto: [email protected] > > Telephone: +1.810.326.1444, ext. 208 > > Live Assistance, Please visit: www.ipexpert.com/chat > > eFax: +1.810.454.0130 > > > > IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, > Audio Tools, Online Hardware Rental and Classroom Training for the Cisco > CCIE (R&S, Voice, Security & Service Provider) certification(s) with > training locations throughout the United States, Europe, South Asia and > Australia. Be sure to visit our online communities at > www.ipexpert.com/communities and our public website at www.ipexpert.com > > > > From: Combatant 101 [mailto:[email protected]] > Sent: Friday, September 17, 2010 12:43 PM > To: 'Tyson Scott'; 'Di Bias, Steve'; 'raghav gurung'; > [email protected] > Subject: RE: [OSL | CCIE_RS] Identifying Broadcast > > > > that sounds a lot more elegant, however is there a big tax on resource in a > production environment? > > > > Like the caveat with using debug ip packet in production.... > > > > Thanks! > > > > From: Tyson Scott [mailto:[email protected]] > Sent: 17 September 2010 17:23 > To: 'Di Bias, Steve'; 'Combatant 101'; 'raghav gurung'; > [email protected] > Subject: RE: [OSL | CCIE_RS] Identifying Broadcast > > > > They both support capturing the traffic using the router. You can export > the files to pcp files if you want to view them later in wireshark too. > > > > Regards, > > > > Tyson Scott - CCIE #13513 R&S, Security, and SP > > Managing Partner / Sr. Instructor - IPexpert, Inc. > > Mailto: [email protected] > > Telephone: +1.810.326.1444, ext. 208 > > Live Assistance, Please visit: www.ipexpert.com/chat > > eFax: +1.810.454.0130 > > > > IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, > Audio Tools, Online Hardware Rental and Classroom Training for the Cisco > CCIE (R&S, Voice, Security & Service Provider) certification(s) with > training locations throughout the United States, Europe, South Asia and > Australia. Be sure to visit our online communities at > www.ipexpert.com/communities and our public website at www.ipexpert.com > > > > From: Di Bias, Steve [mailto:[email protected]] > Sent: Friday, September 17, 2010 12:18 PM > To: Tyson Scott; 'Combatant 101'; 'raghav gurung'; > [email protected] > Subject: RE: [OSL | CCIE_RS] Identifying Broadcast > > > > I don’t have much experience with these technologies myself, something new > to learn! > > > > Thanks! > > > > -Steve > > ________________________________ > > From: Tyson Scott [mailto:[email protected]] > Sent: Friday, September 17, 2010 8:58 AM > To: Di Bias, Steve; 'Combatant 101'; 'raghav gurung'; > [email protected] > Subject: RE: [OSL | CCIE_RS] Identifying Broadcast > > > > Why use wireshark when you can use RITE or embedded packet capture. > > > > Regards, > > > > Tyson Scott - CCIE #13513 R&S, Security, and SP > > Managing Partner / Sr. Instructor - IPexpert, Inc. > > Mailto: [email protected] > > Telephone: +1.810.326.1444, ext. 208 > > Live Assistance, Please visit: www.ipexpert.com/chat > > eFax: +1.810.454.0130 > > > > IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, > Audio Tools, Online Hardware Rental and Classroom Training for the Cisco > CCIE (R&S, Voice, Security & Service Provider) certification(s) with > training locations throughout the United States, Europe, South Asia and > Australia. Be sure to visit our online communities at > www.ipexpert.com/communities and our public website at www.ipexpert.com > > > > From: [email protected] > [mailto:[email protected]] On Behalf Of Di Bias, Steve > Sent: Friday, September 17, 2010 11:10 AM > To: Combatant 101; 'raghav gurung'; [email protected] > Subject: Re: [OSL | CCIE_RS] Identifying Broadcast > > > > I agree, install Wireshark and run a packet capture filtering on only > broadcast traffic. You can be as creative as you want with the filters and > expressions however this should get you going > > > > eth.dst==ff:ff:ff:ff:ff:ff > > > > -Steve > > ________________________________ > > From: [email protected] > [mailto:[email protected]] On Behalf Of Combatant 101 > Sent: Friday, September 17, 2010 7:02 AM > To: 'raghav gurung'; [email protected] > Subject: Re: [OSL | CCIE_RS] Identifying Broadcast > > > > I’d imagine debug ip packets, look for any broadcast packets and make note > of the SRC address? > > > > Get a SPAN and use wireshark, it formats it nicely and even identifies the > packets as ‘broadcasts’ showing SRC address etc > > > > From: [email protected] > [mailto:[email protected]] On Behalf Of raghav gurung > Sent: 17 September 2010 14:46 > To: [email protected] > Subject: [OSL | CCIE_RS] Identifying Broadcast > > > > Is there any way/command that i can check from which IP i am getting > broadcast traffic. > > -- > Regd > Raghav Gurung > +91 9582307405 > > > UHS Confidentiality Notice: This e-mail message, including any attachments, > is for the sole use of the intended recipient(s) and may contain > confidential and privileged information. Any unauthorized review, use, > disclosure or distribution of this information is prohibited, and may be > punishable by law. If this was sent to you in error, please notify the > sender by reply e-mail and destroy all copies of the original message. > > > UHS Confidentiality Notice: This e-mail message, including any attachments, > is for the sole use of the intended recipient(s) and may contain > confidential and privileged information. Any unauthorized review, use, > disclosure or distribution of this information is prohibited, and may be > punishable by law. If this was sent to you in error, please notify the > sender by reply e-mail and destroy all copies of the original message. > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
