408
Packet capture commands
packet-capture
Use
packet-capture
to capture incoming packets on an interface.
Syntax
Save captured packets to a file:
packet-capture interface
interface-type
interface-number
[
capture-filter
capt-expression
|
limit-captured-frames
limit
|
limit-frame-size
bytes
|
autostop filesize
kilobytes
|
autostop
duration
seconds
|
autostop files
numbers
|
capture-ring-buffer filesize
kilobytes
|
capture-ring-buffer duration
seconds
|
capture-ring-buffer files
numbers
] *
write
filepath
[
raw
|
{
brief
|
verbose
} ] *
Filter packet data to display:
packet-capture interface
interface-type
interface-number
[
capture-filter
capt-expression
|
display-filter
disp-expression
|
limit-captured-frames
limit
|
limit-frame-size
bytes
|
autostop
duration
seconds
] * [
raw
| {
brief
|
verbose
} ] *
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
interface
interface-type interface-number
: Specifies a Layer 2 or Layer 3 Ethernet interface by its
type and number.
capture-filter
capt-expression
: Specifies an expression to match packets to be captured. If you do
not specify a capture filter expression, the device captures all incoming packets on an interface.
display-filter
disp-expression
: Specifies an expression to match packets to be displayed. If you do
not specify a display filter expression, the device displays all captured packets.
limit-captured-frames
limit
: Stops capturing packets when the maximum number of captured
packets is reached. The
limit
argument sets the maximum number of packets to capture. The value
range is 0 to 2147483647, and the default value is 10. If you set the limit to 0, the maximum number
of captured packets is unlimited.
limit-frame-size
bytes
: Sets the maximum number of bytes to capture for a packet. The value range
is 64 to 8000 bytes, and the default value is 8000 bytes.
autostop filesize
kilobytes
: Stops capturing packets if the maximum packet file size is exceeded
when file rotation is disabled. The
kilobytes
argument sets the maximum packet file size. The value
range is 1 to 65536 kilobytes. If you do not set a limit, the packet file size is unlimited.
autostop
duration
seconds
: Stops capturing packets when the capturing duration expires. The
seconds
argument sets the capturing duration. The value range is 1 to 2147483647 seconds. If you
do not set a limit, the capturing duration is unlimited.
autostop
files
numbers
: Stops capturing packets when the maximum number of file rotations is
reached. The
numbers
argument sets the maximum number of file rotations. The value range is 2 to
64. The capture creates a file to store packet data when a rotation is triggered. The first rotation
occurs when the capture starts. If you do not set a limit, the number of file rotations is unlimited. This
option must be used with the
autostop
filesize
kilobytes
,
capture-ring-buffer
filesize
kilobytes
, or
capture-ring-buffer
duration
seconds
option.