The only other way that I know of to avoid crashing the router, and getting a useful "sniff" of the WAN traffic, is to use a V.35 protocol analyzer, such as the HP Internet Advisor. This is a pricey unit, but if you do this stuff regularly (as my coworkers and I do), it is the easiest, and most presentable way to do this. Note: There is a short disruption of service while inserting and removing the V.35 Y-cable used to do this.
Internet Advisor generates some very management-friendly reports, used to present findings to people of a slightly more non-technical background. It also has many VERY powerful features (think: SnifferPro-like GUI). I am sure there are other very similiar products out in the field, I am only explaining what I have used. At the present time, this is only the HP Internet Advisor. Regards, Trevor J Corness, CCNA CCDA JNCIS NNCSS MCSE Radian Communication Services Corporation http://www.radiancorp.com On September 26, 2001 07:20 am, MADMAN wrote: > You can easily hedge your bets against crashing the router by using an > extended access-list with ip packet debuging. > > Dave > > Dennis wrote: > > debug ip packet... use with extreme care, you could crash the router if > > you have lots of traffic... > > > > ""Ken"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > > Hi, > > > > > > Does anyone know how I can sniff packet from a router. Or can the > > > router redirect the packet to another Ethernet interface. Like Span > > > port on the switch. I need to capture the packet that is going across > > > the WAN > > > > interface. > > > > > Thanks. > > > > > > Ken Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21716&t=21111 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]