Packet capture

This help contains the following topics:

·     Introduction

·     Restrictions and guidelines

·     Perform packet capture

¡     Start packet capture

¡     Configure packet capture settings

Introduction

The packet capture feature captures incoming and outgoing packets, generates packet capture records, and saves the records to a .cap file. The file can reside on the device or a remote file server. You can use a packet analyzer such as Wireshark to view the file for traffic analysis.

Restrictions and guidelines

·     Only one packet capture process can run on the device.

·     You can configure packet capture parameters only when packet capture is not started.

·     Start packet capture only when necessary. Packet capture affects device performance.

·     If packet capture saves .cap files on the device, back up the .cap files on the device as required after you finish packet capture. Starting packet capture again deletes the existing .cap files.

·     Packet capture is not supported on shared interfaces of a non-default context.

Perform packet capture

Start packet capture

1.     Select Monitor > Diagnosis Center > Packet Capture.

2.     Click Start packet capture.

3.     Configure filters as shown in Table 1.

Table 1 Configuration items for setting filters

4.     Click Start.

On the Packet Capture page, the Packet Capture Status field displays Started.

5.     To stop packet capture, click Stop packet capture.

The Packet Capture Status field displays Stopped. The bottom pane displays information about generated .cap files.

Configure packet capture settings

1.     Select Monitor > Diagnosis Center > Packet Capture.

2.     Click Set packet capture parameters.

3.     Configure packet capture parameters as shown in Table 2:

Table 2 Packet capture configuration items

4.     Click OK.