To analyze packet capture buffer offline, use export it using the command shown below: CSR01#monitor capture TEST_CAPTURE export ?ĬSR01#monitor capture TEST_CAPTURE export bootflash:test_capture.pcap Let’s stop packet capture with the following command. CSR01#show monitor capture TEST_CAPTURE buffer ?ĬSR01#show monitor capture TEST_CAPTURE buffer brief Detailed and dump options display truncated and full packet content. CSR01#monitor capture TEST_CAPTURE startĪfter running some pings from a test PC connected to the service side via GigabitEthernet3, we can validate that packets are being captured. Status Information for Capture TEST_CAPTURE As shown in the listing below, by default, the capture will run till its buffer will reach 10MB. To validate capture parameters run the command: show monitor capture TEST_CAPTURE. Pktlen-range Packet length range to captureĬSR01#monitor capture TEST_CAPTURE match ipv4 ?Ī.B.C.D/nn IPv4 source Prefix /, e.g., 192.168.0.0/16ĬSR01#monitor capture TEST_CAPTURE match ipv4 protocol ?ĬSR01#monitor capture TEST_CAPTURE match ipv4 protocol 1 ?ĬSR01#monitor capture TEST_CAPTURE match ipv4 protocol 1 any ?Ī.B.C.D/nn IPv4 destination Prefix /, e.g., 192.168.0.0/16 CSR01#monitor capture TEST_CAPTURE match ? The next commands configure the same options we used in vManage:ĬSR01#monitor capture TEST_CAPTURE interface GigabitEthernet3 bothĬSR01#monitor capture TEST_CAPTURE match ipv4 protocol 1 any anyīelow are the available options for inline filters. Stop_export Disable Capture and Export Buffer The available command options are shown below. Specify a name for the packet capture instance, in our example it is TEST_CAPTURE. They are available in exec mode, other operational commands, like “show” and “debug”. The next configuration commands provide an example of running packet capture.Įmbedded packet capture commands begin with monitor capture commands. Use SSH to connect to the device either via client installed on your computer or via the tools menu in vManage. If for some reason you can’t use vManage, you can use IOS-XE Embedded Packet Capture directly on the device (the previous process uses this feature on the backend). Maximum number of packets to capture per second: 1000 Number of Packets to capture: 0 (no limit) Interface: GigabitEthernet3, Direction: BOTH Display Captured Packets in Wireshark CSR01#show monitor capture
0 kommentar(er)
