display-filter: standard wireshark display filter syntax Tcp/udp port, src/dst portrange, src/dst port, src/dst host, src/dst net, less/greater, vlan etc …Ģ. capture-filter: standard tcmdump capture filter syntax See the Wireshark weekly tips for helpful hints on using the tool.ġ. Opens the captured data file and analyzes it.Įthanalyzer does not capture data traffic that Cisco NX-OS forwards in the hardware but you can use ACLs with log option as a workaround (see the corresponding paragraph below).Įthanalyzer uses the same capture filter syntax as tcpdump and uses the Wireshark display filter syntax. To configure Ethanalyzer, use the following commands:Ĭaptures packets sent or received by the supervisor and provides detailed protocol information.Ĭaptures packets sent or received by the supervisor and provides detailed protocol information in the inband and outband interfaces.Ĭaptures packets sent or received by the supervisor and provides detailed protocol information in the management interfaces.Įthanalyzer local interface write This document covers configuration of Ethanalyzer, examples of its implementation and Ethanalyzer usage together with ACLs 'log' option to sniff data plane traffic.

You can use Ethanalyzer to troubleshoot your network and analyze the control-plane traffic.

Ethanalyzer is a command-line version of Wireshark that captures and decodes packets. ACLs and Ethanalyzer for Data Plane SamplingĮthanalyzer is a Cisco NX-OS protocol analyzer tool based on the Wireshark (formerly Ethereal) open source code.File logging limitations and enhancements.