Category » Cisco proprietary
Viewing 1 - 15 of 15 captures
Sort by: Newest · Name · Popularity

TDP.cap (2.8 KB)

Packets: 33 Avg Size: 70 bytes Duration: 47.5 sec
Data Rate: 0.38 Kbps Added: 27 Jul 2008 Downloads: 427

P2 and PE2 exchange Tag Distribution Protocol hellos and form an adjacency over TCP port 711.

EIGRPv2_subnet_transition.cap (5.3 KB)

Packets: 49 Avg Size: 95 bytes Duration: 64.6 sec
Data Rate: 0.56 Kbps Added: 24 Jun 2008 Downloads: 277

R4's 2001:db8:0:400::/64 subnet goes down, then comes back up roughly thirty seconds later. Capture perspective from R1's 2001:db8:0:12::1 interface.

EIGRPv2_adjacency.cap (4.1 KB)

Packets: 31 Avg Size: 118 bytes Duration: 52.4 sec
Data Rate: 0.55 Kbps Added: 24 Jun 2008 Downloads: 287

Routers 1 and 2 form an EIGRPv2 adjacency and exchange IPv6 routes.

UDLD.cap (3.3 KB)

Packets: 29 Avg Size: 101 bytes Duration: 93.0 sec
Data Rate: 0.25 Kbps Added: 20 Jun 2008 Downloads: 257

Unidirectional Link Detection (UDLD) is used to monitor the status of a link between a Catalyst 2960 and a Catalyst 3560. Note that echos are initially sent at very small intervals, gradually throttling back to the configured interval of 15 seconds.

HSRP_coup.cap (3.9 KB)

Packets: 51 Avg Size: 62 bytes Duration: 49.3 sec
Data Rate: 0.50 Kbps Added: 19 Jun 2008 Downloads: 250

Initially only routers 3 (active) and 2 (standby) are online. R1 comes online with a priority higher than R3's. R1 takes over as the active router (the coup occurs in packet #22) almost immediately. R2 is bumped down to passive and R3 becomes the standby router.

HSRP_failover.cap (3.0 KB)

Packets: 39 Avg Size: 62 bytes Duration: 47.3 sec
Data Rate: 0.40 Kbps Added: 19 Jun 2008 Downloads: 229

R1 is the active router, R3 is the standby, and R2 is passive. R1 goes offline and R3 takes over as active after ten seconds. R2 is then promoted to the standby state.

HSRP_election.cap (3.7 KB)

Packets: 49 Avg Size: 62 bytes Duration: 57.0 sec
Data Rate: 0.41 Kbps Added: 19 Jun 2008 Downloads: 239

The Ethernet link shared by routers 1, 2, and 3 comes online. R1 wins the HSRP election because it has a priority of 200 (versus the default of 100 held by the other two routers). R3 becomes the standby router.

3560_CDP.cap (1.2 KB)

Packets: 3 Avg Size: 400 bytes Duration: 120.0 sec
Data Rate: 0.08 Kbps Added: 18 Jun 2008 Downloads: 337

Cisco Discovery Protocol (CDP) advertisements from a Catalyst 3560. Note how much information is offered to a potential attacker.

DTP.cap (934 bytes)

Packets: 10 Avg Size: 75 bytes Duration: 120.0 sec
Data Rate: 0.05 Kbps Added: 18 Jun 2008 Downloads: 367

Dynamic Trunking Protocol (DTP) emanated from a Catalyst 3560 every 60 seconds, both with and without ISL encapsulation.

HDLC.cap (3.4 KB)

Packets: 38 Avg Size: 76 bytes Duration: 111.4 sec
Data Rate: 0.20 Kbps Added: 16 Jun 2008 Downloads: 277

ICMP across an HDLC serial link.

3725_CDP.cap (390 bytes)

Packets: 1 Avg Size: 350 bytes Duration: 0 sec
Data Rate: N/A Added: 14 Jun 2008 Downloads: 223

Cisco Discovery Protocol (CDP) from FastEthernet0/0 of a Cisco 3725 router.

EIGRP_goodbye.cap (1.3 KB)

Packets: 15 Avg Size: 74 bytes Duration: 42.9 sec
Data Rate: 0.20 Kbps Added: 14 Jun 2008 Downloads: 445

R2 designates its interface facing R1 as passive. The final hello message from R2 (packet #9) has all its K values set to 255, designating the message as a "goodbye." Capture perspective is from R1's 10.0.0.1 interface.

EIGRP_subnet_down.cap (1.8 KB)

Packets: 21 Avg Size: 73 bytes Duration: 23.4 sec
Data Rate: 0.51 Kbps Added: 14 Jun 2008 Downloads: 202

R4's interface to 192.168.4.0/24 goes down and the route is advertised as unreachable. Queries are issued by all routers to find a new path to the subnet but none exists, and the route is removed from the topology. Capture perspective is from R1's 10.0.0.1 interface.

EIGRP_subnet_up.cap (1.3 KB)

Packets: 15 Avg Size: 73 bytes Duration: 18.5 sec
Data Rate: 0.46 Kbps Added: 14 Jun 2008 Downloads: 203

R4's 192.168.4.0/24 subnet is brought online. R1 receives updates from both R2 and R3 (only R2's update is shown in the capture). The poison-reverse in packet #9 informs R2 not to use R1 as a path to 192.168.4.0/24. The capture perspective is from R1's 10.0.0.1 interface.

EIGRP_adjacency.cap (5.1 KB)

Packets: 53 Avg Size: 82 bytes Duration: 103.7 sec
Data Rate: 0.33 Kbps Added: 14 Jun 2008 Downloads: 240

Formation of an EIGRP adjacency between routers R1 and R2. Capture point is R1's 10.0.0.1 interface.

Viewing 1 - 15 of 15 captures