Packet capture with Nexus 1000V
Today I thought I’d take a look at creating a SPAN session on the 1000v to monitor traffic. I found it really easy to do! SPAN is one of those things that takes you longer to read and understand than to actually configure. I find that true with a lot of Cisco products: Fabric Path, OTV, LISP, etc.
SPAN is “Switched Port Analyzer”. Its basically port monitoring. You capture the traffic going from one port and then mirror it on another. This is one of the benefits you get out of the box for the 1000v that enables the network administrator not to have this big black box of VMs.
First I need to see which vethernet is assigned to which VM. This command can help you do that
|
1 |
show interface status | include <VM's names> |
Then create a monitor session with the following commands
|
1 2 3 4 |
monitor session 1 type local source interface vethernet 3 both destination interface vethernet 58 no shutdown |
And confirm the monitor session with the command
|
1 |
show monitor session 1 |
In this case, we have an error. The state is “Down”. That is because VMTEST1 and VMTEST2 are in 2 difference VM Hosts. After moving them to the same host, the state will change to up