HP
HPE7-A08 · Question #237
You need to run a packet capture on a CX switch and copy the full output directly to an SCP server. What is the best way to do this?
The correct answer is A. Configure a mirror session to the CPU, use tshark to capture it to a PCAP file. Mirroring traffic to the switch CPU allows the built-in packet capture tools to record the full packet stream into a PCAP file, which can then be exported directly from the switch to an SCP server for off-box analysis.
Manage and Monitor HPE Aruba Networking CX Switches
Question
You need to run a packet capture on a CX switch and copy the full output directly to an SCP server. What is the best way to do this?
Options
- AConfigure a mirror session to the CPU, use tshark to capture it to a PCAP file.
- BConfigure a mirror session with another port on the switch as the destination.
- CInspect the summary of the packets in real time on the switch using tcpdump.
- DConfigure a mirror session using ERSPAN to a computer running Wireshark.
How the community answered
(33 responses)- A79% (26)
- B3% (1)
- C6% (2)
- D12% (4)
Explanation
Mirroring traffic to the switch CPU allows the built-in packet capture tools to record the full packet stream into a PCAP file, which can then be exported directly from the switch to an SCP server for off-box analysis.
Topics
#packet capture#tshark#mirror session#SCP
Community Discussion
No community discussion yet for this question.