This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

As of last week, I started receiving numerous input errors on three switchports of a cisco 3750 12 port fiber switch. For example, 21439 input errors, 3 CRC. Switchports on other switches connected to this fiber switch show 0 input errors. I am monitoring three ports in question and captured 5 minutes of traffic. What is the best way to analyze capture to possibly determine source of input errors?

asked 29 Jan '13, 09:08

ws-dmoore's gravatar image

ws-dmoore
1111
accept rate: 0%


AS they are input errors, they will not be duplicated with a monitor session. The only way to catch them would be to place a TAP on the ports and use a sniffer that does not drop frames with a bad FCS. Or maybe do some analysis of bad frames.

What kind of errors are they if they are not CRC errors?

permanent link

answered 29 Jan '13, 09:29

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

Please make sure it's not something simple like a L2 device sending DTP (Dynamic Trunking PRotocol) to your L3 3750 (if it's L3). Router interfaces don't know what DTP is, and will cause input error counters to increment.

Also, Cisco has some nice documents on how to troubleshoot input errors. If you google for it, I'm sure you'll find several articles that can guide you.

Wireshark isn't the best tool because w/o a tap, you'll never see it in Wireshark. Even with a tap, you may not see damaged frames. So troubleshoot with Cisco CLI first (show controllers, sho ip counters, etc.) Good luck.

permanent link

answered 29 Jan '13, 19:52

hansangb's gravatar image

hansangb
7912619
accept rate: 12%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×43
×20
×4
×2

question asked: 29 Jan '13, 09:08

question was seen: 10,878 times

last updated: 29 Jan '13, 19:52

p​o​w​e​r​e​d by O​S​Q​A