Copying Packet Capture Buffer Information - Cisco 4700M Administration Manual

Chapter 4 Managing the ACE Software
•
Detailed Steps
Command
capture buffer_name {{all |
{interface vlan number }}
access-list name [bufsize buf_size
[circular-buffer]]} | remove |
start | stop
Example:
host1/Admin# capture capture1
interface vlan50 access-list acl1
host1/Admin# capture capture1 start
host1/Admin# capture capture1 stop

Copying Packet Capture Buffer Information

This section describes how to copy an existing packet capture buffer to the disk0: file system.
OL-20823-01
Under high traffic conditions, you may observe up to 64 packets printing on the console after you
enter the stop keyword. These additional messages can occur because the packets were in transit or
buffered before you entered the stop keyword.
Purpose
Enables the packet capture function on the ACE for packet sniffing and network
fault isolation.
The keywords, arguments, and options are as follows:
buffer_name—Name of the packet capture buffer. This argument associates the
•
packet capture with a name. Specify a text string from 1 to 80 alphanumeric
characters.
all—Specifies capture packets for all input interfaces.
•
To capture application acceleration and optimization traffic bound for the
Note
optional Cisco AVS 3180A Management Station interface, use the all
keyword. This keyword captures all the traffic on all interfaces. You can
then transfer the packet capture file to a remote machine to be scanned for
traffic that is specific to the Management Station interface.
interface—Specifies the interface from which to capture packets.
•
vlan number—Specifies the VLAN identifier associated with the specified
•
input interface.
access-list name—Selects packets based on an existing access list. A packet
•
must pass the access list filters before the packet is stored in the capture buffer.
Specify a previously created access list identifier. Enter an u nquoted text string
with a maximum of 64 alphanumeric characters.
bufsize buf_size—(Optional) Specifies the buffer size, in kilobytes (KB), to
•
store the packet capture. The range is from 1to 5000 KB. The default is 64 KB.
circular-buffer—(Optional) Enables the packet capture buffer to overwrite
•
itself, starting from the beginning, when the buffer is full.
remove—Removes the packet capture configuration.
•
start—Starts the packet capture function and displays the messages on the
•
session console as the ACE receives the packets. The CLI prompt returns and
you can type other commands at the same time that the ACE is capturing
packets. To stop the capture process, enter stop. The packet capture function
automatically stops when the buffer is full unless you enablethe circular buffer
function.
stop—Stops the packet capture process after a brief delay.
•
Cisco 4700 Series Application Control Engine Appliance Administration Guide
Capturing Packet Information
4-25