|
Posted by on October 3, 2006, 4:47 pm
AM wrote:
> Bod43@hotmail.co.uk wrote:
> > AM wrote:
>
> > I guess that this is a traditional router - please post the exact
> > model.
>
> Hi Anybody43,
>
> my question was general.
> Anyway I would apply that on 800 router series, 837 and 877.
> Unfortunately they don't share they same release of IOS (even among the same
model, they were installed at different times).
> If you have any hint just tell it to me and I will see from which release
onwards that feature is available.
>
> Generally they are not too much overloaded so I I could do that the way I
explained but if there more efficient ways of
> doing that they are welcome. I don't think that to use the debug mode is the
best idea.
> The only doubt I have now is that perhaps I must apply the policy on both the
inlet and outlet interface otherwise the
> flow coming back won't pass through the loopback interface, I guess I need to
force it as I would do for the ongoing flow.
Hi,
As I said thre is no way to generate copies of packets on routers.
You cuold use policy routing to force traffic out and then
feed it back in somehow.
The best solution for this would be add a switch or hub and
if a switch use the Cisco SPAN feature. You can also get
Ethernet T-pieces or Taps.
Depending on what you need you can get a lot of information
from ip accounting, netflow, and of course debug ip packet.
On an 837 without too much traffic deb ip packet is not likely to kill
it
I don't feel unless there are I guess a lot of hosts.
You can "deb ip pac ACL" to limit the amount of traffic logged
but you still have to turn off fast switching.
With Switches you just SPAN the port "monitor session 1 ...".
I often just load ethereal on any PC that I want to monitor
and access the PC remotely.
Pix has "capture" command.
|