Cisco Nexus 5000 Series Switch Fabric Manager Software Configuration Guide, NX-OS 4.0 (OL-16598-01, June 2008)

Send comments to [e-mail]
31-20
Nexus 5000 Series Switch Fabric Manager Software Configuration Guide
OL-16598-01
Chapter 31 Troubleshooting Your Fabric
Configuring a Fabric Analyzer
• To view all FLOGI frames, use this expression:
fcels.opcode == FLOGI
• To view all FLOGI frames in VSAN 1, use this expression:
fcels.opcode == FLOGI && mdshdr.vsan == 2
• To view all name server frames, use this expression:
dNS
Defining Display Filters
Display filters limit the frames that can be displayed, but not what is captured (similar to any view
command). The filters to be displayed can be defined in multiple ways in the GUI application:
• Auto-definition
• Manual definition
• Assisted manual definition
• Only manual definition in local capture
• No assists
Regardless of the definition, each filter must be saved and identified with a name.
Note This GUI-assisted feature is part of Wireshark, and you can obtain more information from
http://www.wireshark.org.
Capture Filters
You can limit what frames are captured by using the capture filters feature in a remote capture. This
feature limits the frames that are captured and sent from the remote switch to the host. For example, you
can capture only class F frames. Capture filters are useful in restricting the amount of bandwidth
consumed by the remote capture.
Unlike display filters, capture filters restrict a capture to the specified frames. No other frames are visible
until you specify a completely new capture.
The syntax for capture filter is different from the syntax for display filters. Capture filters use the
Berkeley Packet Filter (BPF) library that is used in conjunction with the libpcap freeware. The list of all
valid Fibre Channel capture filter fields are provided later in this section.
Procedures to configure capture filters are already documented in the Wireshark website
(http://www.wireshark.org).
These examples show how to use this feature:
• To capture frames only on a specified VSAN, use this expression:
vsan = 1
• To capture only class F frames, use this expression:
class_f