Got it

MA5600T Packets Capture Introduce

Latest reply: Oct 28, 2021 09:03:57 1655 6 8 0 1

Hello, everyone!


1. The mirror port command is used to configure the mirror of an Ethernet port. When you need to copy the traffic of a port to other ports to perform traffic observation, network faulty diagnosis, and data analysis, run this command. After the mirror of an Ethernet port is set, the packets of the mirror source port are copied to the mirror destination port.



command: mirror port src-portid dst-portid mirror-direction


To mirror the received packets of Ethernet port 0/9/0 to port 0/9/1, do as follows:


huawei(config-if-giu-0/19)#mirror port

{ src-portid<U><0,1> }:0

{ dst-portid<U><0,1> }:1

{ mirror-direction<E><ingress,egress,all> }:ingress


  Command:


          mirror port 0 1 ingress



2. The traffic-mirror command is used to mirror the packets that match an ACL filtering rule on a specified port. To monitor the received or transmitted packets of a port so that you can maintain devices or locate faults, run this command to mirror the packets to be monitored on the port to another port.


Assume that the source port you want to mirror is in 0/20/0, and the destination port is 0/19/0

A) first to check the user IPTV flow 



huawei#display igmp user service-port 500

User                       : 0/3/0

State                      : online

Authentication             : auth

Quick leave                : MAC-based

IGMP flow ID               : 500

Video flow ID              : 500

Log switch                 : enable

Bind profiles              : 2

IGMP version               : IGMP v3

Current version            : IGMP v3

IGMP IPv6 version          : IGMP IPv6 v2

Current IGMP IPv6 version  : IGMP IPv6 v2

Available programs         : 10

Global leave               : disable

User max bandwidth         : no-limit

Used bandwidth(kbps)       : 0

Used bandwidth

to max bandwidth(%)        : -

Total video bandwidth      : -

Mcast video bandwidth      : -

Information of latest watched video

----------------------------------------------------------

Time                       : 2013-05-31 11:45+08:00 DST

VLAN                       : 8

Group address              : x.1.1.1       

Source address             : 20.0.0.1

----------------------------------------------------------

Active program list

---------------------------------------------------------------------------

Program name     VLAN  IP/MAC           State           Start time

---------------------------------------------------------------------------

PROGRAM-0        8     x.1.1.1watching        2011-03-15

16:02:38+08:00

---------------------------------------------------------------------------

Total: 1


b) Follow the IP/MAC address mirroring messages such as LSW. If there is an aggregation port, you need to configure the Traffic-mirror on each source port

huawei(config)# acl 3000

huawei (config-acl-adv-3000)# rule 1 permit ip destination x.1.1.1 0

huawei (config)#traffic-mirror inbound link-group  3000 rule 1 port  0/20/0 to  port  0/19/0


c) Remove port mirroring when positioning is complete

 

huawei (config)#undo traffic-mirror inbound link-group  4000 rule 1 port  0/20/0




3. Service flow remote mirroring, which is uploaded to the configured server by remotely capture the service Board user-side message or capture  a protocol message that has been handed over to the CPU of the main control panel.


MA5600T(diagnose)%%file-server auto-backup board-info primary [server-ip] tftp

MA5600T(diagnose)%pture service-port [service-port index] capture-count 1000000 capture-time 2000



Remove port mirroring when positioning is complete:


MA5600T(diagnose)%%undo capture service-port

MA5680T(diagnose)%%undo file-server auto-backup board-info primary


Thank you.


Thanks for your sharing ,which is a wonderful guidance, i really interested in this article, which is useful for us and improvement product technology and become to a professional engineer .
I hope that you can insist post new kownlege and skills, i will alawys keep an eye on your sharing.
View more
  • x
  • convention:

chantha
chantha Created Oct 28, 2021 09:03:27 (0) (0)
 
it's a very useful case But about the packet capture, i want know more detail that if our device can cpautre both inbound and outbound traffic ? because as i know from switch we only can caputre the inbound traffic. if MA5600T can support inbound and outbount it will make the troubshout more easy for us. This post was last edited by SupperRobin at 2018-10-31 07:12.
View more
  • x
  • convention:

chantha
chantha Created Oct 28, 2021 09:03:35 (0) (0)
 
This command is very useful for troubleshooting, if all version of this device have the same command ? or there is some difference ?
View more
  • x
  • convention:

Good one
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.