Jumbo Frames

Hurts my head to think about attempting jumbo frames.
http://www.bitplumber.net/2009/03/how-to-configure-jumbo-frames/

Cisco Nexus: EthAnalyzer

I've been fighting with getting EthAnalyzer trying to get it to do something useful.  But it always only showed me traffic to/from the switch itself, not packets that pass through it. 
Today I found the following information and EUREKA!
ethanalyzer data plane traffic analysis



ACLs and Ethanalyzer for Data Plane Sampling:

The Ethanalyzer captures only traffic on CPU, so seems as unsuitable solution for the data plane traffic analysis. However, this limitation can be avoided with a use of ACL logging to sample specific packets from data plane.

              .   .   .

When we use ACLs and the “log” keyword, access control entries (ACEs) with log keyword cause system to punt a copy of matching packets to supervisor CPU. Key point is that original traffic forwarded or dropped in hardware with no performance penalty. Note that punted copies subjected to hardware rate limiter, forwarding engine hardware enforces rate to avoid saturating inband interface/CPU.

So the following accomplished what I have been trying to do for a long time:

IP access list acl-cap

  10 permit ip 10.10.10.11/32 any log

  20 permit ip any any

Eth6/28

  ip port access-group acl-cap in

ethanalyzer local int inband limit-captured-frames 0 autostop duration 60 write bootflash:test-2.pcap

powershell ssh

One method for using powershell to ssh to a router/etc:
powershelladmin


Unfortunately it doesn't accept a credential object.
One workaround would be something like the following pseudo code:

import-module ssh-sessions
$cred = get-credential
$user = $cred.getnetworkcredential().username
$pw = $cred.getnetworkcredential().password
(create log file)
(get $list of hosts from file)
(get $commands from file)
(for each $comp in $list)
 (output $comp to log file)
 $loginresult = new-sshsession $comp -username $user -password $pw
 (output $loginresult to log file)
 (for each $cmd in $commands)
  $sshresults = invoke-sshcommand -computername $host -command $cmd
  (output $sshresults to log file)
  }
 $logoutresult = remove-sshsession -computername $comp
 (output $logoutresult to log file)
 }

tracetcp

tracetcp


The utility available at the link above is very useful.
Instead of requiring icmp, it will perform a traceroute using any TCP port you wish.


VERY useful for testing custom route-map just for tcp 443.  (I could make plain old traceroute work by adding icmp to the route-map, but that isn't really a test.)

Bandwidth Throttling with Robocopy

Bandwidth throttling with Robocopy

Calculate the /IPG number.

BA=Kbps of circuit

BD=approximate Kbps you want to allow




IPG = ((BA-BD)/BA*BD)*512*1000

SSH from PowerShell using the SSH.NET library - Svendsen Tech Powershell Wiki

SSH from PowerShell using the SSH.NET library - Svendsen Tech Powershell Wiki: SSH from PowerShell using the SSH.NET library