Forum Discussion
TomSu_93471
Feb 01, 2012Nimbostratus
Simultaneous tcpdump capture for two different physical intf 1.1 and 1.2
Hi,
need some help on tcpdump tracing topics. I want to trace two physicals 1.1 and 1.2
at the same time, but this seems not possible ?
1) one session goes ok:
[root@f5-1:Active] tmp tcpdump -s0 -ni 1.1:nnn -w /var/tmp/1.1.pcap tcpdump: listening on 1.1:nnn, link-type EN10MB (Ethernet), capture size 65535 bytes
2) but the 2nd one fails soon after starting:
[root@f5-1:Active] tmp tcpdump -s0 -ni 1.2:nnn -w /var/tmp/1.2.pcap tcpdump: listening on 1.2:nnn, link-type EN10MB (Ethernet), capture size 65535 bytes tcpdump: pcap_loop: Error: Interface packet capture busy
Trace on 0.0 works ok, however I don't see in there references to physical intf numbers, so it will be hard to see real traffic flow what is exactly what I need (STP BPDUs issue between Cisco and f5)
Any help on this topics appreciated,
Cheers
Tom
- nitassEmployeeI want to trace two physicals 1.1 and 1.2 at the same time, but this seems not possible ? no, it is not possible.
- Naresh_15230Historic F5 Account1) Create vlan by associating interface like this
- Nick_Ehlers_132Nimbostratus
this wont work then?
- system tcpdump –i (1.1, f5_trunk1, external, 0.0) –eXs 0 –w /var/tmp/dump.cap &
- system tcpdump –i (1.1, f5_trunk1, external, 0.0) –eXs 0 –w /var/tmp/dump2.cap &
- system fg
- ctl+c
- system fg
- ctl+c
- system tcpdump –r /var/tmp/dump.cap
- system tcpdump –r /var/tmp/dump2.cap
???????
Hi Nick,
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects