В маршрутизаторах серии ESR реализована возможность анализировать трафик на интерфейсах из CLI. Сниффер запускается командой monitor.
esr# monitor gigabitethernet 1/0/1
Для удобства использования организована возможность фильтрации вывода, например:
esr# monitor gigabitethernet 1/0/1 ? destination-address Filter by destination IP address detailed Detailed output packets Count packets protocol Choose protocol type source-address Filter by source IP address <cr>
esr# monitor gigabitethernet 1/0/1 protocol ? 0-255 Filter by IP protocol number RDP Filter by RDP protocol ah Filter by AH protocol arp Filter by ARP protocol eigrp Filter by EIGRP protocol esp Filter by ESP protocol gre Filter by GRE protocol icmp Filter by ICMP protocol icmp6 Filter by ICMP6 protocol igmp Filter by IGMP protocol igrp Filter by IGRP protocol ipip Filter by IPIP protocol l2tp Filter by L2TP protocol ospf Filter by OSPF protocol pim Filter by PIM protocol tcp Filter by TCP protocol udp Filter by UDP protocol vrrp Filter by VRRP protocol
Запись дампов трафика в файл в текущих версиях ПО невозможна.