Could Nokia sniff LLDP packet?

[paramount]

Hi,

Further to mivens response above, you could create the mac-filter but also log the matching packets to a file or to memory. The below will just be 500 entries in memory.

Try this:

configure filter
log 150 create
destination memory 500
exit
mac-filter 500 create
entry 10 create
match frame-type ethernet_II
etype 0x88cc
exit
log 150
action
forward
exit
exit
exit

Then you can check it:

show filter log 150

Thanks
paramount

[paramount]

NB - the default-action of filters is always drop, so either change this to forward (see below), or create a catch all entry too, otherwise traffic will stop on any interface you apply this too.

config filter mac-filter 500
default-action forward

paramount.

[plawansai]

So, I will configure this, right

Code: Select all

configure filter 
        log 150 create
            destination memory 500
        exit
        mac-filter 500 create
            entry 10 create
                match frame-type ethernet_II
                    etype 0x88cc
                exit 
                log 150
                action
                    forward
                exit
            exit 
        exit
debug
    mirror-source 1
        port 1/1/1 ingress
        mac-filter 500 entry 10
        no shutdown
    exit
exit

*A:R1# debug
*A:R1>debug# mirror-source 1
MINOR: SVCMGR #3010 Mirror destination does not exist - Svc Id = 1

Thank you very much.

[paramount]

Hi,

No, the filter and the mirror and two different tools.

The MAC filter can be applied to a sevice sap, such as an epipe or VPLS etc. Don;t think you can apply this directly to a port unfortunately though.

So not sure what your network looks like, you may need to use the mirror to capture the packets.

Have you also checked the output of the show command, that has many stats in there for lldp.

show port x/x/x ethernet lldp detail

Thanks
paramount

[plawansai]

There is Deep packet inspection between the network port which block LLDP between routers. How should I do

Thank you very much.

[mivens]

If the LLDP frames are being blocked by a third-party and you can't get them to change this, then the question is whether there is an alternative way of achieving your aims without it.

What are you trying to achieve / what is the specific problem you are trying to solve?

To take one example, if you are using it to build a L3 topology then you may be able to use IGP adjacency information instead.

[plawansai]

Actually, the router sees the LLDP with their mac address instead of another side. They would like me to help them capture packet, what is packet they sent to the router

Thank you very much.