Locally packet capture on ICX ?

Question

Hi, is there an option to capture packets from certain interface to local memory on ICX switches ?
I can use port mirroring but only if I'm on site where that switch is. I need a solution to capture packet remotely.

Any help would be appreciated.
Thanks

mIRO

vu_pham_ghtztqm · Accepted Answer

Hi - You can try ERSPAN feature to send the capture traffic to a remote host.http://docs.ruckuswireless.com/fastiron/08.0.70/fastiron-08070-monitoringguide/GUID-EF051D2A-CAB7-45...

hashim_bharooc1 · Accepted Answer

Hi Miroslav,We do not support pcap capabilities on ICX.We do have a dm raw utility, this will ONLY capture packets hitting the ICX, for exampleBroadcastUnknown UnicastMulticastProtocol Packets.Please see video with dm raw example:https://www.youtube.com/watch?v=6a18tpkE_y4For ssh /telnet sessions we need to find your session:show who7650#sh whoConsole connections (by unit number): 1      established, monitor enabled, privilege super-user        you are connecting to this session        2 second(s) in idleTelnet server status: Enabledthen debug  destination  then run dm raw, please watch video above.Also we can get context sensitive help on dm raw and it shows all options.But this will require TAC case to help you debug.Hope this helpsThanksHashim

jijo_panangat · Accepted Answer

Hi Miro,On ICX switches the feature to save packet capture locally on the flash/memory isn't available but Using ERSPAN, you can encapsulate monitored traffic and send it to an analysis station not directly connected to the switch.Pls refer monitoring guide for more details.http://docs.ruckuswireless.com/fastiron/08.0.70/fastiron-08070-monitoringguide/GUID-40AA6E17-B2A6-49...ThanksJijo