Could Nokia sniff LLDP packet?

plawansai
Member
Posts: 24
Joined: 28 Nov 2017 04:30

Could Nokia sniff LLDP packet?

Post by plawansai » 17 May 2018 06:43

Could Nokia sniff LLDP packet :?:

Thank you very much.
ปลาวาฬทราย

mivens
Member
Posts: 240
Joined: 28 Sep 2012 06:34

Re: Could Nokia sniff LLDP packet?

Post by mivens » 17 May 2018 21:41

Have a look at the section "Port MIrroring" in the 7750 SR OS OAM and Diagnostics Guide.

plawansai
Member
Posts: 24
Joined: 28 Nov 2017 04:30

Re: Could Nokia sniff LLDP packet?

Post by plawansai » 18 May 2018 01:01

Could you please narrow down to the commands like this :?:

Code: Select all

configure filter log 140 create destination memory 4000
configure filter ip-filter 40 create entry 10 create match protocol ip
back
log 140
action forward
back
entry 20 create match protocol icmp
back
log 140
action forward
Thank you very much.
ปลาวาฬทราย

mivens
Member
Posts: 240
Joined: 28 Sep 2012 06:34

Re: Could Nokia sniff LLDP packet?

Post by mivens » 18 May 2018 06:17

Are you asking how you can match an LLDP frame?
It's not an IP packet so you can't explicitly match it in an IP filter.
You could try a mac-filter, something like:

          mac-filter "100"
              entry 10 create
                  match
                      etype "0x88cc"
                  exit
                  action
                     forward
                 exit
             exit
         exit

plawansai
Member
Posts: 24
Joined: 28 Nov 2017 04:30

Re: Could Nokia sniff LLDP packet?

Post by plawansai » 18 May 2018 06:53

Great!
But It says:

Code: Select all

>config>filter>mac-filter>entry# match etype "0x88cc"
MINOR: FILTER #1521 Invalid frame type - E-type cannot be configured/changed.
How should I do :?:

Thank you very much.
ปลาวาฬทราย

mivens
Member
Posts: 240
Joined: 28 Sep 2012 06:34

Re: Could Nokia sniff LLDP packet?

Post by mivens » 18 May 2018 16:09

Sorry, I forgot the frame-type is mandatory. Try this instead:

configure filter mac-filter "100" create
  entry 10 create
    match frame-type ethernet_II  etype "0x88cc"
    action  forward

plawansai
Member
Posts: 24
Joined: 28 Nov 2017 04:30

Re: Could Nokia sniff LLDP packet?

Post by plawansai » 21 May 2018 00:09

How to apply to the network port :?:

Thank you very much.
ปลาวาฬทราย

mivens
Member
Posts: 240
Joined: 28 Sep 2012 06:34

Re: Could Nokia sniff LLDP packet?

Post by mivens » 21 May 2018 08:21

You need to first define a destination for the mirrored traffic then with a debug command, start the mirroring. The simplest is to send the mirrored traffic out of another local port.

For example, to mirror the ingress traffic matching mac-filter 100 entry 10 on source port is 1/1/1 to destination port 2/2/2:

 configure
     mirror
         mirror-dest "1" create
             sap "2/2/2" create
             exit
            no shutdown
         exit
     exit
 exit
debug
    mirror-source 1
        port 1/1/1 ingress
        mac-filter 100 entry 10
        no shutdown
    exit
exit

plawansai
Member
Posts: 24
Joined: 28 Nov 2017 04:30

Re: Could Nokia sniff LLDP packet?

Post by plawansai » 22 May 2018 02:42

Could it destination to the log or storage :?: Which I can upload over the VPN to my laptop.
ปลาวาฬทราย

mivens
Member
Posts: 240
Joined: 28 Sep 2012 06:34

Re: Could Nokia sniff LLDP packet?

Post by mivens » 22 May 2018 04:59

It's not a debug command. I do not believe there is an lldp debug command available.

This is copying the raw packets and sending therm out of another port on the 7750.
You would need to connect a laptop running Wireshark (or another packet capture application) to the destination port.

It is also possible to send the mirrored packets over the network to a remote 7750, but this is obviously a bit more complicated to set up.

Post Reply

Return to “7750 SR”