Cisco IOS Embedded Packet Capture

Cisco ha da poco rilasciato una nuova funzionalità per l'IOS 12.4(20)T relativa alla cattura ed all'analisi del traffico, l'EPC (Embedded Packet Capture).

Dal siti Cisco vediamo le caratteristiche:

Features and Benefits
Cisco IOS Embedded Packet Capture provides an additional level of embedded systems management not previously seen in Cisco IOS Software. The feature provides enhanced capabilities beyond those previously enabled in the Router IP Traffic Export feature.
EPC includes:


• The ability to capture IPv4 and IPv6 packets in the Cisco Express Forwarding path


• A flexible method for specifying the capture buffer size and type


• EXEC-level commands to start and stop the capture


• Show commands to display packet contents on the device


• Facility to export the packet capture in PCAP format, suitable for analysis using an external tool such as Wireshark


• Extensible infrastructure for enabling packet capture points


Per informazioni :  http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6555/ps9913/datasheet_c78-502727.html



Per vederlo nel dettaglio vi rimando al blog CCIE in 3 months dove è spiegato in modo perfetto:

http://ccie-in-3-months.blogspot.com/2008/07/embedded-packet-capture-how-to-make.html