On-box packet sniffing

On-box packet sniffing monitors and analyzes network traffic on ports without using an external device, such as collector or an agent. Use this feature to reduce costs and simplify debugging.

On-box packet sniffing allows you to monitor IPv4 packets on ingress or egress ports, matching them based on header attributes like source IP, destination IP, source MAC, destination MAC, VLAN, and VNID. You can store the sniffed packets in pcap format. We've introduced the following configuration statements to support this feature:

• To enable the tracing operations, configure the [set services pfe traffic traceoptions file filename] statement.
• To increase the default timer that is set for uninstalling the filter and deleting the entries, configure the [set services pfe traffic monitor-timer time] statement.
• To enable egress packet monitoring, configure the [set interface interface-name ether-options loopback] statement. You must configure an additional unused interface for a virtual loopback interface to achieve egress packet monitoring.