Tunnel capture object using a remote ip address – Nortel Networks NN46110-602 User Manual

Page 124

Advertising
background image

124 Chapter 5 Packet capture

NN46110-602

After Telnet traffic activates the stop trigger, the

show capture

command

resembles the following example. The Capture state field now shows that the
capture was stopped by the stop trigger.

CES#

show capture test-trigger

Capture state: STOPPED by stop

trigger

Capture buffer size: 1048576

Capture type: ETHERNET

Capturing on interface: FastEthernet 0/1

Promiscuous mode is: DISABLED

Capturing MAX octets per frame: 4096

Captured frames: 188

Capture buffer utilization: 1%

Capturing direction: BIDIRECTIONAL

Capture buffer wrapping: DISABLED

Capture buffer wrapped: FALSE

Start trigger applied: permit FTP

Start trigger discards: 362

Stop trigger applied: permit Telnet

CES#

To stop the capture object and save the buffer contents to a file called test4.cap,
enter the following commands:

CES#

capture test-trigger stop

CES#

capture test-trigger save test4.cap

Saving capture test-trigger to file /ide0/test4.cap please wait . .

.

220 frames written successfully

CES#

Tunnel capture object using a remote IP address

In the following example, you configure a capture object called test-remote-IP
that captures traffic arriving over a tunnel with the specified remote IP address.

To create and use this capture object, you run commands like the ones illustrated
in this example. These commands do the following:

1

Create a capture object called test-remote-ip.

2

Enter Capture Configuration mode for the capture object.

3

Set the remote IP address to 192.168.100.1.

Advertising