In this video I'm going to show you how to use t shock as well as term shock t shock to capture traffic
off the wire and term shock to view.
Why shock captures through a terminal.
Sometimes you don't have access to a gooey interface.
Sometimes you want to be able to capture packets of The Wire using a terminal and T shock is great for
doing that.
As an example you may run a captcha application on a Linux server or linux host which doesn't have a
graphical user interface installed.
You could as an example run it on a Raspberry Pi so capture traffic off the wire using a Raspberry Pi
but do that without a graphical user interface.
So simply using a console capture the traffic and you may want to be able to view those why shock captures
through a console.
So that's what I'm going to demonstrate in this video.
In this June 23 topology I've got an input to host this Ubuntu host does not have a graphical user interface.
So if I type clear all I get is a console connection.
There is no graphical user interface so as an example if I want to view the interfaces on this device
I'm doing that through a C Ally.
I'm not doing it through a graphical user interface.
All I have is a console connection
so as an example I'll edit this file so that the host gets an IP address from a DHB server.
What I'll do is close that console connection down or terminal down stop the boon to client started
up again open up a console notice yet I now have an IP address that has been allocated to me via DCP
the Nat cloud is allocating IP addresses to the boon to client.
This is a bolt in ingenious 3 switch.
This is a Cisco switch.
This is a Cisco router running with ingenious 3.
So the problem here is I can't run a graphical y shock application.
I need to run y Ashok directly through the console
so the first thing I'm going to do is top apt get update to update my boot to references
okay.
Now that my bunch of references have been updated through apt get update what I'm going to do is install
t shock so to do that I type apt get install t shock
say yes to install the application.
So what this is doing is connecting to the Ubuntu cloud and essentially downloading and installing t
shock on this one to client
a modest should.
Non super users be able to capture packets I'm going to say yes but in this example I'm actually logged
in as root so I'm simply going to capture using root so I've now installed t shock I can started by
simply typing teh shock and notice it's capturing packets on ether net zero.
It's essentially capturing packets on this interface.
And what we're seeing at the moment of spending three messages that are sent by the switch.
What I'll do on the router is enable o SPF and we should be able to see 0 SPF updates so we'll get this
device to use DCP and then enable who SPF on all interfaces.
It's now received an IP address through DCP.
Notice we can see information such as spanning tree of messages and so forth.
Now that's not great.
That's just showing me the updates in real time so I can see as an example DTP off the HP request.
So what you may find more useful is to push that to a file so write it to a file.
In this case T shock one dot P cap as an example.
So that's capturing the traffic and dumping it into that file.
So as an example show IPO SPF interface brief we're running 0 SPF on this right now.
Five top clear IPO SPF process and clear all the OSP processes 0 SPF messages will be captured.
Let's enable EAI GOP CIO job P and all enable that on all interfaces hopefully this t shock application
is not capturing messages including spanning tree clearing CTP DTP UI GOP o SPF and so forth so I'll
stop that by pressing control see and notice I now have a T shocked up peak cap file.
Now I want to be able to view that I could copy that to my windows computer as an example or my Mac
or a Linux computer with a gooey and then open that up with wire shock.
But let's review the files directly through this console.