Packet Captures
Viewing 1 - 18 of 18
- 1
MSTP_Intra-Region_BPDUs.cap (1.7 KB)
| Packets: 10 | Duration: 10s | Downloads: 101 |
MSTP BPDUs captured on an intra-region root port.
00:1f:27:b4:7d:80 - CIST Root (is in another MSTP Region)
00:16:46:b5:8c:80 - CIST Regional Root, Root for Instance 0, 2
00:1e:f7:05:a8:80 - Root for Instance 1
Notice in frame 1 that 00:1e:f7:05:a8:80 uses 32768.00:16:46:b5:8c:80 (Regional Root BID) as bridge ID in the main STP header to make the region appear as a single bridge.
packet-c.cap (675.0 KB)
| Packets: 926 | Duration: 13s | Downloads: 822 |
This is a packet capture from a SonicWall. We were troubleshooting DHCP packet flows. The SonicWall saw the DHCP Discover and Sent an Offer. We never saw the DHCP acknowledgement. In the adjacent core stacked switching we were running "debug ip dhcp server packets" we only saw discover packets from IP phones up to the SonicWall. For some reason the SonicWall could not let any other DHCP packets through or out of it INSIDE (LAN) interface. Even if we put an ANY-ANY ALC for that interface. We ended up having to replace the SonicWall and upload the configuration from the old SonicWall to the new one.
-Slaingod
iphttps.cap (12.4 KB)
| Packets: 83 | Duration: 38s | Downloads: 4074 |
IP-HTTPS capture. This is Microsoft's IPv6 inside HTTPS tunneling for DirectAccess.
LLDP_and_CDP.cap (4.0 KB)
| Packets: 12 | Duration: 98s | Downloads: 3883 |
LLDP and CDP advertisements sent between two switches, S1 and S2.
802.1Q_tunneling.cap (5.0 KB)
| Packets: 26 | Duration: 35s | Downloads: 6729 |
rpvstp-trunk-native-vid5.pcap.cap (1.8 KB)
| Packets: 22 | Duration: 11s | Downloads: 4797 |
Rapid per-VLAN spanning tree capture of a trunk port, configured with native VLAN 5, VLAN 1 is also active over the trunk.
Capture shows that 3 BPDUs are sent out, one for classic STP (Frame 4, for example), one for the native VLAN 5 (not tagged - Frame 5) and one for each other active VLAN (tagged - Frame 3).
The PVST BPDUs contain the VLAN ID at the end of the frame (01 and 05, respectively).
rpvstp-trunk-native-vid1.pcap.cap (6.4 KB)
| Packets: 81 | Duration: 45s | Downloads: 3869 |
Rapid per-VLAN spanning tree capture of a trunk port, configured with native VLAN 1 (default), VLAN 5 is also active over the trunk.
Capture shows that 3 BPDUs are sent out, one for classic STP (Frame 4, for example), one for the native VLAN (not tagged - Frame 3) and one for each other active VLAN (tagged - Frame 5).
The PVST BPDUs contain the VLAN ID at the end of the frame (01 and 05, respectively).
rpvstp-access.pcap.cap (3.7 KB)
| Packets: 49 | Duration: 77s | Downloads: 3569 |
Rapid per-VLAN spanning tree capture of an access port (without portfast), configured in VLAN 5.
PAGP.cap (2.5 KB)
| Packets: 25 | Duration: 95s | Downloads: 3487 |
UDLD.cap (3.3 KB)
| Packets: 29 | Duration: 93s | Downloads: 3252 |
Unidirectional Link Detection (UDLD) is used to monitor the status of a link between a Catalyst 2960 and a Catalyst 3560. Note that echos are initially sent at very small intervals, gradually throttling back to the configured interval of 15 seconds.
- Categories: Cisco-proprietary, Switching
- Protocols: Ethernet, LLC, UDLD
ISIS_level2_adjacency.cap (51.8 KB)
| Packets: 43 | Duration: 85s | Downloads: 2379 |
Routers 3 and 4 form an IS-IS level 2 adjacency.
- Categories: Routing Protocols
- Protocols: Ethernet, ISIS, LLC
ISIS_level1_adjacency.cap (27.4 KB)
| Packets: 22 | Duration: 58s | Downloads: 2202 |
Routers 2 and 3 form an IS-IS level 2 adjacency.
- Categories: Routing Protocols
- Protocols: Ethernet, ISIS, LLC
ISIS_external_lsp.cap (17.0 KB)
| Packets: 15 | Duration: 23s | Downloads: 1923 |
R2 floods the external routes redistributed from RIP into area 10. Packet #9 includes the IP external reachability TLV. Capture perspective from R3's 10.0.10.1 interface.
- Categories: Routing Protocols
- Protocols: Ethernet, ISIS, LLC
DTP.cap (934 bytes)
| Packets: 10 | Duration: 120s | Downloads: 2648 |
Dynamic Trunking Protocol (DTP) emanated from a Catalyst 3560 every 60 seconds, both with and without ISL encapsulation.
802.1w_rapid_STP.cap (2.3 KB)
| Packets: 30 | Duration: 56s | Downloads: 2966 |
Rapid Spanning Tree Protocol BPDUs are received from a Catalyst switch after connecting to a port not configured for PortFast. The port transitions through the blocking and learning states before issuing a topology change notification (packet #30) and transitioning to the forwarding state.
802.1D_spanning_tree.cap (1.1 KB)
| Packets: 14 | Duration: 26s | Downloads: 3462 |
IEEE 802.1D Spanning Tree Protocol (STP) advertisements sent every two seconds.
3725_CDP.cap (390 bytes)
| Packets: 1 | Duration: n/a | Downloads: 2301 |
Cisco Discovery Protocol (CDP) from FastEthernet0/0 of a Cisco 3725 router.
- Categories: Cisco-proprietary
- Protocols: CDP, Ethernet, LLC
3560_CDP.cap (1.2 KB)
| Packets: 3 | Duration: 120s | Downloads: 2560 |
Cisco Discovery Protocol (CDP) advertisements from a Catalyst 3560. Note how much information is offered to a potential attacker.
- Categories: Cisco-proprietary
- Protocols: CDP, Ethernet, LLC
Viewing 1 - 18 of 18
- 1