CISCO - Letšoao

Embedded Packet Capture

CISCO 9800 Series Catalyst Wireless Controller - Sekoahelo

Nalane ea Sebopeho bakeng sa Capture ea Pakete e Kenyelitsoeng

Tafole ena e fana ka tlhaiso-leseling e amanang le eona mabapi le karolo e hlalositsoeng karolong ena. Tšobotsi ena e boetse e fumaneha likhatisong tsohle tse latelang tseo li hlahisoang ho tsona, ntle le haeba ho boletsoe ka tsela e 'ngoe.

Letlapa la 1: Histori ea Sebopeho bakeng sa Capture ea Pakete e Kenyelitsoeng

Lokolla Sebopeho Lintlha tsa Sebopeho
Cisco IOS XE Dublin
17.12.1
Pakete e kentsoeng
Tšoara
Karolo ea Embedded Packet Capture e ea ntlafatsoa ho ts'ehetsa boholo bo eketsehileng ba buffer, ho ts'oaroa ho tsoelang pele, le ho sefa ha liaterese tse ngata tsa MAC ho Embedded e le 'ngoe.
Seboka sa Packet Capture (EPC).

Tlhahisoleseding mabapi le Embedded Packet Capture

Sebopeho sa Embedded Packet Capture se thusa ho latella le ho rarolla lipakete. Embedded Packet Capture ho controller e sebelisetsoa ho rarolla mathata a mangata, joalo ka, litaba tsa netefatso ka RADIUS, ho ikopanya le AP kapa ho khaoha, ho fetisoa ha bareki, ho khaola, le ho solla, le likarolo tse ling tse kang multicast, mDNS, sekhele, mobility, le joalo-joalo.Tlhahiso ena e lumella batsamaisi ba marang-rang ho hapa lipakete tsa data tse phallang, ho ea, le ho tloha sesebelisoa sa Cisco. Ha u rarolla bothata ba ho ikopanya le AP kapa bothata ba bareki ba ho kena, haeba u sa khone ho emisa ho ts'oara hang ha bothata bo hlaha, lintlha tsa bohlokoa li ka lahleha. Maemong a mangata, buffer ea 100 MB ha e lekane bakeng sa ho hapa data. Ho feta moo, karolo e teng ea Embedded Packet Capture e ts'ehetsa feela ho sefa ha aterese e le 'ngoe ea kahare ea MAC, e hapang sephethephethe sa moreki ea itseng. Ka linako tse ling, ho thata ho supa hore na ke moreki ofe ea se nang mohala o tobaneng le bothata.

Ho tloha ho Cisco IOS XE Dublin 17.12.1, karolo ea Embedded Packet Capture e ts'ehetsa boholo bo eketsehileng ba buffer, ho ts'oaroa ho tsoelang pele, le ho sefa ha liaterese tse ngata tsa MAC sebokeng se le seng sa Embedded Packet Capture. Ha ho na mehato ea GUI ea ho hlophisa ntlafatso ea Embedded Packet Capture.

Ho Hlophisa Pakete e Kenyellelitsoeng Capture (CLI)

Ka ntlafatso ea karolo ea Embedded Packet Capture, boholo ba buffer bo eketseha ho tloha ho 100 MB ho isa ho 500 MB.

  Hlokomela
Buffer ke ea mofuta oa memori. O ka boloka buffer ea memori kapa oa kopitsa buffer ea memori e teng ho file ho boloka tlhahisoleseding e eketsehileng.

Tsamaiso

Taelo kapa Ketso Morero
Mohato oa 1 ExampLe:
nolofalletsa
Sesebelisoa> lumella
E nolofalletsa mokhoa o khethehileng oa EXEC.
Kenya phasewete ea hau, haeba u khothalletsoa.
Mohato oa 2 hlokomela sebopeho sa lebitso la epc-session-name
GigabitEthernet interface-nomoro {ka bobeli ho
tsoa}
ExampLe:
Sesebelisoa # hlokomela sehokelo sa epc-session1 GigabitEthernet 0/0/1 ka bobeli
E lokisa sebopeho sa Gigabit Ethernet bakeng sa ho kena, ho tsoa, ​​kapa ka bobeli le ho
lipakete tse tsoang.
Gigabit ke ea balaoli ba Cisco 9800-CL, bakeng sa mohlalaample, Gi1, Gi2, kapa Gi3. Bakeng sa balaoli ba 'mele, u tlameha ho bolela mocha oa boema-kepe, haeba o hlophisitsoe. Examples bakeng sa lihokelo tsa 'mele
ke Te kapa Tw.
Hlokomela
U ka boela ua tsamaisa taelo ea sefofane sa taolo ea ho hapa punt ea pakete ho CPU.
Mohato oa 3 (Ka boikhethelo) beha leihlo ho hapa lebitso la epc-session
moeli oa nako moeli oa nako
ExampLe:
Sesebelisoa # hlokomela ho hapa epc-session1 moeli oa nako 3600
E beakanya moeli oa ho hapa mochine, ka metsotsoana.
Mohato oa 4 (Ka boikhethelo) beha leihlo ho hapa lebitso la epc-session
selikalikoe sa buffer file no-of-files file- boholo ka-file- boholo
ExampLe:
Sesebediswa# hlokomela sedikadikwe sa buffer sa epc-session1 file 4 file- boholo ba 20
Configures the file ka har'a buffer e chitja. (Buffer e ka ba selikalikoe kapa e mela).
Ha selikalikoe se hlophisitsoe, the files sebetsa joalo ka ring buffer. Boleng ba boleng ba nomoro
of files ho hlophisoa ho tloha ho 2 ho ea ho 5. Theko ea boleng ba file boholo bo tsoa ho 1 MB ho isa ho 500 MB. Ho na le mantsoe a fapaneng a bohlokoa a fumanehang bakeng sa taelo ea buffer, joalo ka, selikalikoe, file, le boholo. Mona, taelo e chitja ke ea boikhethelo.
Hlokomela
Buffer e chitja ea hlokahala bakeng sa ho ts'oaroa khafetsa.
Mohato ona o hlahisa swap files ho molaoli. Fapanya files ha se pakete ea ho hapa (PCCAP) files, ka hona, e ke ke ea hlahlojoa.
Ha taelo ea ho romela kantle e sebetsa, swap files li kopanngoa le ho romelloa kantle e le PCAP e le 'ngoe file.
Mohato oa 5 hlokomela tšoantšiso ea lebitso la epc-session {leha e le efe | ipv4 | ipv6 | mac | pklen-range}
ExampLe:
Sesebelisoa sa # hlokomela ho hapa epc-session1 e bapisa leha e le efe
E lokisa lihloela tse ka har'a marang-rang.
Hlokomela
O ka configure filters le ACLs.
Mohato oa 6 (Ka boikhethelo) beha leihlo ho hapa lebitso la epc-session
Lenane la phihlello-lethathamo-lebitso
ExampLe:
Sesebelisoa # hlokomela ho hapa epc-session1
lethathamo-lethathamo la phihlello1
E lokisa sekoahelo sa sebono se hlakisang lenane la phihlello e le sefe sa ho nka pakete.
Mohato oa 7 (Ka boikhethelo) beha leihlo ho hapa lebitso la epc-session
ho hapa ka ho tsoelang pele http:location/filelebitso
ExampLe:
Sesebediswa# hlokomela ho hapa epc-session1 continuous-capture
https://www.cisco.com/epc1.pcap
E lokisa ho nka pakete e tsoelang pele. E nolofalletsa thomello e iketsang ea files ho e itseng
sebaka pele buffer e ngoloa.
Hlokomela
• Buffer e chitja ea hlokahala bakeng sa ho hapa khafetsa.
• Hlophisa the filelebitso le nang le katoloso ea .pcap.
• Mohlalaample ea filelebitso le mabitso a sebelisoang ho hlahisa filelebitso ke le latelang:
CONTINUOUS_CAP_20230601130203.pcap
CONTINUOUS_CAP_20230601130240.pcap
• Ka mor'a hore liphutheloana li romelloe ka ntle, "buffer" ha e hlakoloe ho fihlela e ngotsoe holim'a lipakete tse ncha tse kenang, kapa litaelo tse hlakotsoeng kapa tse hlakotsoeng.
Mohato oa 8 (Ha ho boikhethelo) [ha ho] beha leihlo ho hapa epc-session-name inner mac MAC1 [MAC2… MAC10] ExampLe:
Sesebelisoa # hlokomela ho hapa epc-session1
ka hare mac 1.1.1 2.2.2 3.3.3 4.4.4
E lokisa ho fihla ho liaterese tse 10 tsa MAC joalo ka sesefa sa kahare sa MAC.
Hlokomela
• U ke ke ua fetola li-MAC tse ka hare ha ho ntse ho ts'oaroa.
• O ka kenya liaterese tsa MAC ka taelo e le 'ngoe kapa ka ho sebelisa mela e mengata ea litaelo.
Ka lebaka la moeli oa mohala oa mohala, o ka kenya liaterese tse hlano feela tsa MAC ka e le 'ngoe
mola oa taelo. U ka kenya liaterese tse ling tsa MAC moleng o latelang oa taelo.
• Haeba palo ea liaterese tsa MAC tse hlophisitsoeng e le 10, aterese e ncha ea MAC e ke ke ea hlophisoa ho fihlela u hlakola aterese ea khale ea MAC e hlophisitsoeng.
Mohato oa 9 hlokomela ho qala ha lebitso la epc-session-name
ExampLe:
Sesebelisoa # ha ho na leihlo la ho hapa epc-session1 qala
E qala ho nka data ea pakete.
Mohato oa 10 monitor Capture epc-session-name stop
ExampLe:
Sesebediswa# ha ho na monitor capture epc-session1 stop
E emisa ho nka data ea pakete.
Mohato oa 11 hlokomela ho romela thepa ea epc-session-name
filesebaka/filelebitso
ExampLe:
Sesebediswa# hlokomela thomello ea epc-session1
https://www.cisco.com/ecap-file.pcap
E romela data e hapiloeng bakeng sa tlhahlobo ha ho ts'oaroa khafetsa ho sa lokisoe.

Netefatsa Pakete e Kenyellelitsoeng Capture

Ho view e hlophisitsoeng file palo le ka file saese, tsamaisa taelo e latelang:

Hlokomela
Taelo e latelang e ea hlaha ho sa tsotelehe hore na ho ts'oaroa ho sa khaotse ho nolofalitsoe kapa che. Liaterese tsa ka hare tsa MAC tse hlophisitsoeng le tsona li hlahisoa ho sebelisoa taelo ena.

CISCO 9800 Series Catalyst Wireless Controller - Netefatsa Embedded Packet Capture 1

Ho view buffer e hlophisitsoeng ea Embedded Packet Capture files, tsamaisa litaelo tse latelang:

CISCO 9800 Series Catalyst Wireless Controller - Netefatsa Embedded Packet Capture 2

CISCO - Letšoao

Litokomane / Lisebelisoa

CISCO 9800 Series Catalyst Wireless Controller Embedded Packet Capture [pdf] Bukana ea Mosebelisi
9800 Series Catalyst Wireless Controller Embedded Packet Capture, 9800 Series, Catalyst Wireless Controller Embedded Packet Capture, Wireless Controller Embedded Packet Capture, Controller Embedded Packet Capture, Embedded Packet Capture, Packet Capture, Capture
CISCO 9800 Series Catalyst Wireless Controller [pdf] Bukana ea Mosebelisi
9800 Series Catalyst Wireless Controller, 9800 Series, Catalyst Wireless Controller, Wireless Controller, Controller

Litšupiso

Tlohela maikutlo

Aterese ea hau ea lengolo-tsoibila e ke ke ea phatlalatsoa. Libaka tse hlokahalang li tšoailoe *