IP Packet Monitor Captures

[Shine52]

Could anyone tell me how to set up my monitor filters to capture IP packets recieved and sent in an SCN enviroment? I'd like nearly everything else turned off so I don't have to sift through all that data.

Thanks!

Figure it out damn-it!

 

[intrigrant]

put in the mac adresses of the ipo's ( max 2 )
if you have more ipos then start multiple monitor apps

 

[Shine52]

Intrigrant, I don't think thats it. Thanks for the effort. I'm looking for the actual monitor "ticks" that I need to track the SCN packets, not how to monitor a certain switch.

Monitor has so much info being passed through it, its impossible to track. Just looking for to set up my filters so I'm seeing mostly IP based captures.

Figure it out damn-it!

 

[NuggiFirst]

If you only wan't to see IP packets send between two certain units then:

1. Select "Clear All"
2. Tick: "Interface" > "Interface packtes in" and "Interface packets out"
3. Enter the first IPO's IP address in "Interface" > "IP Address 1"
4. Enter the second IPO's IP address in "Interface" > "IP Address 2"

That should do it!

 

[intrigrant]

I thought that to be obviuos, disable all options in the filter and enable packets in/out, packets queud in/out, enable broadcasts and set packetsize to 1500 put in the mac addresses and off you go.
If you have more sites then consider a packet sniffer, these have very good filters on board and will show all available info.
This will only work if the SCN is properly setup ( star network ) were the sniffer is at the point were all data comes together.