Cisco Catalyst 4500 Series Software Configuration Guide

68-11
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 68 Configuring Wireshark
How to Configure Wireshark
• Classification copy features—Features that generate copies of packets from the role-based and
Security lookup types are compatible with Wireshark. Multiple copies of these packets are
generated.
• SPAN—Wireshark cannot capture packets on interface configured as a SPAN source or destination.
Wireshark on VSS
Wireshark is supported on the VSS, and usage differs slightly from the Standalone switch. Depending
on whether the attachment points are in the VSS active switch, the VSS standby switch, or both, you
need to take specific actions.
You need to create and delete capture points separately in the VSS active and VSS standby switches.
Although you also need to start and stop capture operations separately in these switches, you can issue
the same set of attachment points for a capture session in both switches. The individual switches ignore
attachments points that are not local to the switch.
In the VSS active switch, the operation is identical to that of the standalone switch. In the VSS standby,
hardware copies the relevant packets and sends them to the CPU where they are packets are
software-tunneled to the VSS active switch via the VSL link. In the VSS active switch, these packets are
sent to software as if the packets came from local hardware. Packets from the local switch and those from
the standby switch are processed by the Wireshark session in the VSS active switch while the VSS
standby switch copies the relevant packets and passes them to the VSS active switch. The Wireshark
session in the VSS standby is otherwise unused and no packets are delivered.
If the attachment points are only in the VSS active switch, then the operations are similar to those on the
Standalone switch. If the attachment points are either only in VSS standby switch or in both the switches,
then you must start and stop the session both in VSS active switch and in VSS standby switch.
Note Your Wireshark session in VSS standby only helps in packet capture and does not participate otherwise.
Do not start the Wireshark session on the VSS standby with the display and any related parameters.
How to Configure Wireshark
To configure Wireshark, follow these general steps:
Step 1 Define, modify or delete a capture point.
Step 2 Activate or deactivate a capture point.
Default Wireshark Configuration
Table 68-1 shows the default Wireshark configuration.
Table 68-1 Default Wireshark Configuration
Feature Default Setting
Duration No limit
Packets No limit
Packet-length No limit (full packet)

Cisco Catalyst 4500 Series Specifications

General

Series	Catalyst 4500 Series
Category	Switch
Layer Support	Layer 2, Layer 3
Form Factor	Modular chassis
Stackable	No
Chassis Slots	3, 6, 7, 10
Power Supply Options	AC, DC
Redundancy	Power supply, Supervisor engine
Network Management	Cisco IOS Software CLI, SNMP, Cisco Prime Infrastructure
Features	Security, QoS
Port Density	Up to 384 ports per chassis
Security Features	802.1X, ACLs, DHCP Snooping, Dynamic ARP Inspection, IP Source Guard
Supervisor Engine	8-E