question

Rodney_Stanton avatar image
Rodney_Stanton asked Rodney_Stanton commented

Is there documentation/training on setting up a Raw Stream Block to setup ARP header and see Wireshark capture? I want to setup and send 1000 arps per second and see it on wireshark.

Spirent TestCenter (STC)Wiresharkstreamblockarprawstreamblock
3 comments
10 |950

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Rodney_Stanton avatar image Rodney_Stanton commented ·

also want to do another Raw Stream Block and setup Ping test (1000 Pings/second) and see it on Wireshark.

0 Likes 0 ·
Rodney_Stanton avatar image Rodney_Stanton commented ·

I was able to create a raw stream block and add ICMP Request. I have a mirror on the port to capture the packets and Wireshark on a PC and I see the data. But I do not see data when I select Capture and do Start/Stop/View in Spirent. I have confirmed that Wireshark does work within Spirent on other tests because I see data. Am I supposed to see Wireshark data when using Raw Stream Blocks?

0 Likes 0 ·
Rodney_Stanton avatar image Rodney_Stanton commented ·

I changed the destination ip address to the gateway and I'm able to see the capture within Spirent. So there must be a filter/acl blocking my reply with my other destination address. So now i'm just back to working on the ARP Raw stream blocks. I will play around with it but would still be interested in more Spirent Training. Our company has paid for full support from Spirent but thought I would start first on the Forum.

0 Likes 0 ·

1 Answer

·
mnakamura avatar image
mnakamura answered Rodney_Stanton commented

To create ARP as a raw stream we do have an ARP header so just delete the default IPv4 header and add the ARP header.

As for the capture, you will see in the GUI showing information about the Capture Source. Capturing transmitted packets are only for control plane. Data traffic can only be captured on the receive side. Note that transmission of a stream blocks is considered data traffic, no matter how you configure it. So if you want to capture this raw stream block you created, it can only be done if received.

If you want to verify what you created, you can put the TestCenter port into diagnostic loopback and then you will be able to capture it since it is now being also received on that port.

Once you verify it is good, you can put the port back to normal mode.

After placing back to normal mode any captures on that port will only show the responses.

2 comments
10 |950

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

mnakamura avatar image mnakamura ♦ commented ·

In general I usually set the frame size to Auto and uncheck Include Signature but the DUT may be fine with the defaults.

In any case just checking you have it set to broadcast (FF:FF:FF:FF:FF:FF)

As for Spirent Training, please see your Spirent Representative in your area.

0 Likes 0 ·
arp.png (55.1 KiB)
Rodney_Stanton avatar image Rodney_Stanton commented ·

Thanks for the info. I'm new at testing with Spirent and slowing learning. I do have my broadcast set at FF:FF:FF:FF:FF:FF. I did create an ARP Rawstreamblock. I will change frame size to Auto and uncheck Include Signature as you recommended. I am seeing the ARP data now so not sure exactly what I did wrong on the first go around. Thanks for the explanation of what I should see on the Wireshark capture within Spirent. I was thinking I should see the output but you clarified that for me.

0 Likes 0 ·

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.