Monday, 23 December 2013

Getting switch info from your *nix hosts

I can't take credit for learning this and its a rehash of many posts on the internet, but quite often you have a problem with something network related and you need to know what switch you're attached to, or its location, or even which port you're plugged into - how to find out?

Using tcpdump its nice and easy...

tcpdump -vvv -i eth0 'multicast and (ether[12:2]=0x88c or ether[20:2]=0x2000)' 

If you're on Solaris, snoop gets the same info but its messier on screen...

snoop -xrvvvvv -d e1000g0 'multicast and (ether[12:2]=0x88c or ether[20:2]=0x2000)'

No comments: