Page 1 of 2

Could Nokia sniff LLDP packet?

Posted: 17 May 2018 06:43
by plawansai
Could Nokia sniff LLDP packet :?:

Thank you very much.

Re: Could Nokia sniff LLDP packet?

Posted: 17 May 2018 21:41
by mivens
Have a look at the section "Port MIrroring" in the 7750 SR OS OAM and Diagnostics Guide.

Re: Could Nokia sniff LLDP packet?

Posted: 18 May 2018 01:01
by plawansai
Could you please narrow down to the commands like this :?:

Code: Select all

configure filter log 140 create destination memory 4000
configure filter ip-filter 40 create entry 10 create match protocol ip
back
log 140
action forward
back
entry 20 create match protocol icmp
back
log 140
action forward
Thank you very much.

Re: Could Nokia sniff LLDP packet?

Posted: 18 May 2018 06:17
by mivens
Are you asking how you can match an LLDP frame?
It's not an IP packet so you can't explicitly match it in an IP filter.
You could try a mac-filter, something like:

          mac-filter "100"
              entry 10 create
                  match
                      etype "0x88cc"
                  exit
                  action
                     forward
                 exit
             exit
         exit

Re: Could Nokia sniff LLDP packet?

Posted: 18 May 2018 06:53
by plawansai
Great!
But It says:

Code: Select all

>config>filter>mac-filter>entry# match etype "0x88cc"
MINOR: FILTER #1521 Invalid frame type - E-type cannot be configured/changed.
How should I do :?:

Thank you very much.

Re: Could Nokia sniff LLDP packet?

Posted: 18 May 2018 16:09
by mivens
Sorry, I forgot the frame-type is mandatory. Try this instead:

configure filter mac-filter "100" create
  entry 10 create
    match frame-type ethernet_II  etype "0x88cc"
    action  forward

Re: Could Nokia sniff LLDP packet?

Posted: 21 May 2018 00:09
by plawansai
How to apply to the network port :?:

Thank you very much.

Re: Could Nokia sniff LLDP packet?

Posted: 21 May 2018 08:21
by mivens
You need to first define a destination for the mirrored traffic then with a debug command, start the mirroring. The simplest is to send the mirrored traffic out of another local port.

For example, to mirror the ingress traffic matching mac-filter 100 entry 10 on source port is 1/1/1 to destination port 2/2/2:

 configure
     mirror
         mirror-dest "1" create
             sap "2/2/2" create
             exit
            no shutdown
         exit
     exit
 exit
debug
    mirror-source 1
        port 1/1/1 ingress
        mac-filter 100 entry 10
        no shutdown
    exit
exit

Re: Could Nokia sniff LLDP packet?

Posted: 22 May 2018 02:42
by plawansai
Could it destination to the log or storage :?: Which I can upload over the VPN to my laptop.

Re: Could Nokia sniff LLDP packet?

Posted: 22 May 2018 04:59
by mivens
It's not a debug command. I do not believe there is an lldp debug command available.

This is copying the raw packets and sending therm out of another port on the 7750.
You would need to connect a laptop running Wireshark (or another packet capture application) to the destination port.

It is also possible to send the mirrored packets over the network to a remote 7750, but this is obviously a bit more complicated to set up.