Packet Captures
Viewing 1 - 16 of 16
- 1
iphttps.cap (12.4 KB)
| Packets: 83 | Duration: 38s | Downloads: 3428 |
IP-HTTPS capture. This is Microsoft's IPv6 inside HTTPS tunneling for DirectAccess.
LLDP_and_CDP.cap (4.0 KB)
| Packets: 12 | Duration: 98s | Downloads: 3204 |
LLDP and CDP advertisements sent between two switches, S1 and S2.
802.1Q_tunneling.cap (5.0 KB)
| Packets: 26 | Duration: 35s | Downloads: 5847 |
rpvstp-trunk-native-vid5.pcap.cap (1.8 KB)
| Packets: 22 | Duration: 11s | Downloads: 4161 |
Rapid per-VLAN spanning tree capture of a trunk port, configured with native VLAN 5, VLAN 1 is also active over the trunk.
Capture shows that 3 BPDUs are sent out, one for classic STP (Frame 4, for example), one for the native VLAN 5 (not tagged - Frame 5) and one for each other active VLAN (tagged - Frame 3).
The PVST BPDUs contain the VLAN ID at the end of the frame (01 and 05, respectively).
rpvstp-trunk-native-vid1.pcap.cap (6.4 KB)
| Packets: 81 | Duration: 45s | Downloads: 3367 |
Rapid per-VLAN spanning tree capture of a trunk port, configured with native VLAN 1 (default), VLAN 5 is also active over the trunk.
Capture shows that 3 BPDUs are sent out, one for classic STP (Frame 4, for example), one for the native VLAN (not tagged - Frame 3) and one for each other active VLAN (tagged - Frame 5).
The PVST BPDUs contain the VLAN ID at the end of the frame (01 and 05, respectively).
rpvstp-access.pcap.cap (3.7 KB)
| Packets: 49 | Duration: 77s | Downloads: 3133 |
Rapid per-VLAN spanning tree capture of an access port (without portfast), configured in VLAN 5.
PAGP.cap (2.5 KB)
| Packets: 25 | Duration: 95s | Downloads: 3143 |
UDLD.cap (3.3 KB)
| Packets: 29 | Duration: 93s | Downloads: 2906 |
Unidirectional Link Detection (UDLD) is used to monitor the status of a link between a Catalyst 2960 and a Catalyst 3560. Note that echos are initially sent at very small intervals, gradually throttling back to the configured interval of 15 seconds.
- Categories: Cisco-proprietary, Switching
- Protocols: Ethernet, LLC, UDLD
ISIS_level2_adjacency.cap (51.8 KB)
| Packets: 43 | Duration: 85s | Downloads: 2122 |
Routers 3 and 4 form an IS-IS level 2 adjacency.
- Categories: Routing Protocols
- Protocols: Ethernet, ISIS, LLC
ISIS_level1_adjacency.cap (27.4 KB)
| Packets: 22 | Duration: 58s | Downloads: 1961 |
Routers 2 and 3 form an IS-IS level 2 adjacency.
- Categories: Routing Protocols
- Protocols: Ethernet, ISIS, LLC
ISIS_external_lsp.cap (17.0 KB)
| Packets: 15 | Duration: 23s | Downloads: 1721 |
R2 floods the external routes redistributed from RIP into area 10. Packet #9 includes the IP external reachability TLV. Capture perspective from R3's 10.0.10.1 interface.
- Categories: Routing Protocols
- Protocols: Ethernet, ISIS, LLC
DTP.cap (934 bytes)
| Packets: 10 | Duration: 120s | Downloads: 2351 |
Dynamic Trunking Protocol (DTP) emanated from a Catalyst 3560 every 60 seconds, both with and without ISL encapsulation.
802.1w_rapid_STP.cap (2.3 KB)
| Packets: 30 | Duration: 56s | Downloads: 2522 |
Rapid Spanning Tree Protocol BPDUs are received from a Catalyst switch after connecting to a port not configured for PortFast. The port transitions through the blocking and learning states before issuing a topology change notification (packet #30) and transitioning to the forwarding state.
802.1D_spanning_tree.cap (1.1 KB)
| Packets: 14 | Duration: 26s | Downloads: 2956 |
IEEE 802.1D Spanning Tree Protocol (STP) advertisements sent every two seconds.
3725_CDP.cap (390 bytes)
| Packets: 1 | Duration: n/a | Downloads: 2039 |
Cisco Discovery Protocol (CDP) from FastEthernet0/0 of a Cisco 3725 router.
- Categories: Cisco-proprietary
- Protocols: CDP, Ethernet, LLC
3560_CDP.cap (1.2 KB)
| Packets: 3 | Duration: 120s | Downloads: 2233 |
Cisco Discovery Protocol (CDP) advertisements from a Catalyst 3560. Note how much information is offered to a potential attacker.
- Categories: Cisco-proprietary
- Protocols: CDP, Ethernet, LLC
Viewing 1 - 16 of 16
- 1