Junos OS

Hi There,

I am interested to monitor all vrrp messages on a specific interface.

Reading this: https://www.juniper.net/assets/us/en/local/pdf/books/day-one-poster-monitor-command.pdf

It seems that the syntax of the command is something like

monitor traffic interface ae90.11 matching  "([ip] proto 112 | ip[9]=112)"

but i get syntax error as soon i run this command

hw: mx80

sw: 16.1R5.7

Any suggestion is welcome: target is only moniotr vrrp traffic.

Thanks.

Hello,

Please try the following command:

user@mx> monitor traffic interface xe-1/0/0 matching "ip proto 112" no-resolve
verbose output suppressed, use <detail> or <extensive> for full protocol decode
Address resolution is OFF.
Listening on xe-1/0/0, capture size 96 bytes

Best regards,

Sergii

-------------------------------------------------------------------

Please accept the solution if your problem is resolved

-------------------------------------------------------------------

Use or keyword instead of "|"

monitor traffic interface ae90.11 matching "(proto 112 or ip[9]=112)"

To be 100% clear, both tcpdump filters do the same thing - "proto 112" and "ip[9]=112". So if your task is to monitor VRRP traffic only, you'll achieve the same result by using any of the following commands:

monitor traffic interface ae90.11 matching "proto 112"
monitor traffic interface ae90.11 matching "ip[9]=112"
monitor traffic interface ae90.11 matching "(proto 112 or ip[9]=112)"

Best regards,

Sergii

-------------------------------------------------------------------

Please accept the solution if your problem is resolved

-------------------------------------------------------------------