Packet Captures
Viewing 1 - 15 of 15
- 1
UDLD.cap (3.3 KB)
| Packets: 29 | Duration: 93s | Downloads: 4673 |
Unidirectional Link Detection (UDLD) is used to monitor the status of a link between a Catalyst 2960 and a Catalyst 3560. Note that echos are initially sent at very small intervals, gradually throttling back to the configured interval of 15 seconds.
- Categories: Cisco-proprietary, Switching
- Protocols: Ethernet, LLC, UDLD
TDP.cap (2.8 KB)
| Packets: 33 | Duration: 47s | Downloads: 3298 |
P2 and PE2 exchange Tag Distribution Protocol hellos and form an adjacency over TCP port 711.
HSRP_failover.cap (3.0 KB)
| Packets: 39 | Duration: 47s | Downloads: 3464 |
R1 is the active router, R3 is the standby, and R2 is passive. R1 goes offline and R3 takes over as active after ten seconds. R2 is then promoted to the standby state.
- Categories: Cisco-proprietary, Redundancy
- Protocols: Ethernet, HSRP, IP, UDP
HSRP_election.cap (3.7 KB)
| Packets: 49 | Duration: 57s | Downloads: 3263 |
The Ethernet link shared by routers 1, 2, and 3 comes online. R1 wins the HSRP election because it has a priority of 200 (versus the default of 100 held by the other two routers). R3 becomes the standby router.
- Categories: Cisco-proprietary, Redundancy
- Protocols: Ethernet, HSRP, IP, UDP
HSRP_coup.cap (3.9 KB)
| Packets: 51 | Duration: 49s | Downloads: 2912 |
Initially only routers 3 (active) and 2 (standby) are online. R1 comes online with a priority higher than R3's. R1 takes over as the active router (the coup occurs in packet #22) almost immediately. R2 is bumped down to passive and R3 becomes the standby router.
- Categories: Cisco-proprietary, Redundancy
- Protocols: Ethernet, HSRP, IP, UDP
EIGRP_subnet_up.cap (1.3 KB)
| Packets: 15 | Duration: 18s | Downloads: 3807 |
R4's 192.168.4.0/24 subnet is brought online. R1 receives updates from both R2 and R3 (only R2's update is shown in the capture). The poison-reverse in packet #9 informs R2 not to use R1 as a path to 192.168.4.0/24. The capture perspective is from R1's 10.0.0.1 interface.
- Categories: Cisco-proprietary, Routing Protocols
- Protocols: EIGRP, Ethernet, IP
EIGRP_subnet_down.cap (1.8 KB)
| Packets: 21 | Duration: 23s | Downloads: 2947 |
R4's interface to 192.168.4.0/24 goes down and the route is advertised as unreachable. Queries are issued by all routers to find a new path to the subnet but none exists, and the route is removed from the topology. Capture perspective is from R1's 10.0.0.1 interface.
- Categories: Cisco-proprietary, Routing Protocols
- Protocols: EIGRP, Ethernet, IP
EIGRP_goodbye.cap (1.3 KB)
| Packets: 15 | Duration: 43s | Downloads: 3386 |
R2 designates its interface facing R1 as passive. The final hello message from R2 (packet #9) has all its K values set to 255, designating the message as a "goodbye." Capture perspective is from R1's 10.0.0.1 interface.
- Categories: Cisco-proprietary, Routing Protocols
- Protocols: EIGRP, Ethernet, IP
EIGRP_adjacency.cap (5.1 KB)
| Packets: 53 | Duration: 104s | Downloads: 4137 |
Formation of an EIGRP adjacency between routers R1 and R2. Capture point is R1's 10.0.0.1 interface.
- Categories: Cisco-proprietary, Routing Protocols
- Protocols: EIGRP, Ethernet, IP
EIGRPv2_subnet_transition.cap (5.3 KB)
| Packets: 49 | Duration: 65s | Downloads: 2999 |
R4's 2001:db8:0:400::/64 subnet goes down, then comes back up roughly thirty seconds later. Capture perspective from R1's 2001:db8:0:12::1 interface.
- Categories: Cisco-proprietary, Routing Protocols
- Protocols: EIGRP, Ethernet, IPv6
EIGRPv2_adjacency.cap (4.1 KB)
| Packets: 31 | Duration: 52s | Downloads: 3149 |
Routers 1 and 2 form an EIGRPv2 adjacency and exchange IPv6 routes.
- Categories: Cisco-proprietary, Routing Protocols
- Protocols: EIGRP, Ethernet, IPv6
DTP.cap (934 bytes)
| Packets: 10 | Duration: 120s | Downloads: 3828 |
Dynamic Trunking Protocol (DTP) emanated from a Catalyst 3560 every 60 seconds, both with and without ISL encapsulation.
3725_CDP.cap (390 bytes)
| Packets: 1 | Duration: n/a | Downloads: 3182 |
Cisco Discovery Protocol (CDP) from FastEthernet0/0 of a Cisco 3725 router.
- Categories: Cisco-proprietary
- Protocols: CDP, Ethernet, LLC
3560_CDP.cap (1.2 KB)
| Packets: 3 | Duration: 120s | Downloads: 3595 |
Cisco Discovery Protocol (CDP) advertisements from a Catalyst 3560. Note how much information is offered to a potential attacker.
- Categories: Cisco-proprietary
- Protocols: CDP, Ethernet, LLC
Viewing 1 - 15 of 15
- 1