System Notes Org

Discover the Switch Port to which the Server is Connected A previous article, Advanced Linux Networking Tools , covered the basic usage of tcpdump and tshark to discover switch ports on a Cisco switch, but there are times a system may be connected to a different brand, or using a different protocol.  Also, wireshark is not always installed, so relying on tshark is not always the most convenient way to get the required info. By default, Cisco uses a proprietary method of communication between switches and routers called Cisco Discovery Protocol (CDP).  There is another protocol called Link Layer Discovery Protocol (LLDP), which used by other brands, so it is useful to list other options. Find switch information First, use ifconfig to find the interface names.  Then, use tcpdump to listen for packets.  Optional:  write the packet capture output to a .cap file, and use tshark to read the output. Cisco Discovery Protocol (CDP) YOUR_INTERFACE=eth0 ...

Some of the more common tools for advanced networking include: tcpdump, netstat, wireshark, and tshark. A previous article covered Basic Linux Networking Tools . Discover Switch Information Now for the advanced stuff. We use tcpdump, and write it to a file pkt.cap. Then we use tshark to read the file. How to check the router to which the linux host is connected. # tcpdump -nvi eth0 -c 1 -s 1500 -w pkt.cap ether proto 0xaa and ether dst 01:00:0c:cc:cc:cc and ether\[20\] \=\= 0x20 and ether\[21\] \=\= 0x00 # tshark -V -r pkt.cap # tcpdump -nvi eth0 -c 1 -s 1500 -w pkt.cap ether proto 0xaa and ether dst 01:00:0c:cc:cc:cc and ether\[20\] \=\= 0x20 and ether\[21\] \=\= 0x00;tshark -V -r pkt.cap tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 1500 bytes 1 packets captured 1 packets received by filter 0 packets dropped by kernel Running as user "root" and group "root". This could be dangerous. Frame 1 (416 bytes on wire, 416 bytes captured) Arrival T...

When studying for a Cisco certification such as CCNA, CCNP, CCIP, or CCIE, there is nothing like having real routers and switches to play with, but it can get expensive to build a lab to study with. There is an excellent simulator that is free, but the users must supply their own Cisco IOS software. Once it is set up, the simulated routers, switches, and firewalls act as if they were real hardware. That gives the user flexibility to play with the real Cisco IOS from command prompts on the simulated hardware. What is GNS3? GNS3 is a graphical network simulator that allows you to design complex network topologies. You may run simulations or configure devices ranging from simple workstations to powerful Cisco routers. It is based on Dynamips, an IOS emulator which allows users to run IOS binary images from Cisco Systems and Pemu, a PIXOS emulator to emulate PIX firewalls. Where Can I Download GNS3? http://www.gns3.net How To Configure GNS3 This installation assumes you have a cisco rout...