Packet Captures

Sort by new | name | popular

Viewing 1 - 14 of 14

  • 1

MSTP_Intra-Region_BPDUs.cap (1.7 KB)

Packets: 10 Duration: 10s Downloads: 3977

MSTP BPDUs captured on an intra-region root port.

00:1f:27:b4:7d:80 - CIST Root (is in another MSTP Region)
00:16:46:b5:8c:80 - CIST Regional Root, Root for Instance 0, 2
00:1e:f7:05:a8:80 - Root for Instance 1

Notice in frame 1 that 00:1e:f7:05:a8:80 uses 32768.00:16:46:b5:8c:80 (Regional Root BID) as bridge ID in the main STP header to make the region appear as a single bridge.

QinQ.pcap.cap (184 bytes)

Packets: 2 Duration: 2s Downloads: 7558

ARP requests having two vlan IDs attached (QinQ)

LLDP_and_CDP.cap (4.0 KB)

Packets: 12 Duration: 98s Downloads: 7025

LLDP and CDP advertisements sent between two switches, S1 and S2.

802.1Q_tunneling.cap (5.0 KB)

Packets: 26 Duration: 35s Downloads: 10660

rpvstp-trunk-native-vid5.pcap.cap (1.8 KB)

Packets: 22 Duration: 11s Downloads: 6668

Rapid per-VLAN spanning tree capture of a trunk port, configured with native VLAN 5, VLAN 1 is also active over the trunk.

Capture shows that 3 BPDUs are sent out, one for classic STP (Frame 4, for example), one for the native VLAN 5 (not tagged - Frame 5) and one for each other active VLAN (tagged - Frame 3).

The PVST BPDUs contain the VLAN ID at the end of the frame (01 and 05, respectively).

rpvstp-trunk-native-vid1.pcap.cap (6.4 KB)

Packets: 81 Duration: 45s Downloads: 5342

Rapid per-VLAN spanning tree capture of a trunk port, configured with native VLAN 1 (default), VLAN 5 is also active over the trunk.

Capture shows that 3 BPDUs are sent out, one for classic STP (Frame 4, for example), one for the native VLAN (not tagged - Frame 3) and one for each other active VLAN (tagged - Frame 5).

The PVST BPDUs contain the VLAN ID at the end of the frame (01 and 05, respectively).

rpvstp-access.pcap.cap (3.7 KB)

Packets: 49 Duration: 77s Downloads: 4772

Rapid per-VLAN spanning tree capture of an access port (without portfast), configured in VLAN 5.

PAGP.cap (2.5 KB)

Packets: 25 Duration: 95s Downloads: 4503

LACP.cap (2.8 KB)

Packets: 20 Duration: 112s Downloads: 6148

UDLD.cap (3.3 KB)

Packets: 29 Duration: 93s Downloads: 4675

Unidirectional Link Detection (UDLD) is used to monitor the status of a link between a Catalyst 2960 and a Catalyst 3560. Note that echos are initially sent at very small intervals, gradually throttling back to the configured interval of 15 seconds.

ICMP_across_dot1q.cap (1.7 KB)

Packets: 15 Duration: 35s Downloads: 5063

A ping issued from 192.168.123.2 to 192.168.123.1 is encapsulated with an IEEE 802.1Q header, placing it in VLAN 123.

DTP.cap (934 bytes)

Packets: 10 Duration: 120s Downloads: 3831

Dynamic Trunking Protocol (DTP) emanated from a Catalyst 3560 every 60 seconds, both with and without ISL encapsulation.

802.1w_rapid_STP.cap (2.3 KB)

Packets: 30 Duration: 56s Downloads: 4850

Rapid Spanning Tree Protocol BPDUs are received from a Catalyst switch after connecting to a port not configured for PortFast. The port transitions through the blocking and learning states before issuing a topology change notification (packet #30) and transitioning to the forwarding state.

802.1D_spanning_tree.cap (1.1 KB)

Packets: 14 Duration: 26s Downloads: 5676

IEEE 802.1D Spanning Tree Protocol (STP) advertisements sent every two seconds.

Viewing 1 - 14 of 14

  • 1