Actually, using the 6500's NAM you can capture data (it actually uses
Ethereal to capture the packets), and then pull it off the NAM and view
it/manipulate it within Ethereal (since the web-frontend to view captured
data on the NAM is pitifully slow and not very friendly). That's what I
do here... I don't do anything with the RMON side of things for packet
analysis; simply use that for watching 'interesting' hosts/conversations.
Scott
Scott Fringer Shands Healthcare @ U.F.
Network Systems Analyst Gainesville, FL
On Tue, 6 Aug 2002 Alistair.McGlinchy@xxxxxxxxxxxxxxxxxxxxx wrote:
> Nick,
>
> > Does anyone here use RMON to capture packets? I'm using a
> > Cisco Layer-3 switch and it appears the only way I'm going to
> > be able to do packet capturing is with RMON, but I have no
> > idea how. The old "port monitor" command was much easier,
> > but this switch doesnt do it.
>
> I use 3Com's LANSentry Capture utility to run RMON based captures (it's very
> old but does the trick). This is not very helpful for you as 3COM are out of
> the RMON game these days and have end-of-lifed there Transcend suite. (Boo
> hiss!)
>
> I presume you're using Cat 6500's? I understand that the latest Cisco's NAM
> cards provides a Web based front end to port spans and RMON captures. We
> have an older version of the NAM software and Cisco recommend Cisco Works to
> get captures from it. However Cisco Works is far less function at RMON
> capturing so I've stuck to LANSenrty. (Off topic plug: could anyone who has
> a NAM and is sucessfully collecting RMON2 TopN application layour matrix
> information please email me off list).
>
> Im not sure if there are any open source or GNU RMON1 capture utilities for
> windows. There is Argus though; I'm stuck in Windows land so I haven't tried
> it.
> http://www.qosient.com/argus/faq.htm
>
> HTH
>
> Alistair
>
>
>
> -----------------------------------------------------------------------
>
>
> Registered Office:
> Marks & Spencer p.l.c
> Michael House, Baker Street,
> London, W1U 8EP
> Registered No. 214436 in England and Wales.
>
> Telephone (020) 7935 4422
> Facsimile (020) 7487 2670
>
> www.marksandspencer.com
>
> Please note that electronic mail may be monitored.
>
> This e-mail is confidential. If you received it by mistake, please let us know and then delete it from your system; you should not copy, disclose, or distribute its contents to anyone nor act in reliance on this e-mail, as this is prohibited and may be unlawful.
>
> The registered office of Marks and Spencer Financial Services PLC, Marks and Spencer Unit Trust Management Limited, Marks and Spencer Life Assurance Limited and Marks and Spencer Savings and Investments Limited is Kings Meadow, Chester, CH99 9FB.
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
