Saving, Downloading, And Viewing Pcap Files - Nortel NN46110-602 Troubleshooting Manual

126 Chapter 5 Packet capture
3
4
5
6

Saving, downloading, and viewing PCAP files

To save and download a PCAP file and view it using the VPN Router
utility and Ethereal software:
1
2
3
4
5
NN46110-602
Click ethereal-setup-n.nn.n.exe.
Click a download site and save the executable file on your hard drive.
Double-click the executable file to install Ethereal software in the
c:\Program Files\Ethereal directory.
After you install the software, click the Ethereal application to open the
Ethereal window.
On your PC, create a PCAP directory called c:\pcap.
In the c:\pcap\ directory, copy the openpcap.exe file that is provided with the
VPN Router packet capture software.
On the VPN Router, stop the packet capture object and save the output to a
file, for example:
capture ethernet1 stop
CES#
capture ethernet1 save ethernet.cap
CES#
Saving capture ethernet to file /ide0/ethernet.cap
please wait . . 82 frames written successfully
Note: If you are running PCAP on a VPN Router that has two hard
drives, save the PCAP files to directory /ide1.
On the PC, use FTP software to connect to the VPN Router and copy the
ethernet.cap file located in the /ide0/ directory to the c:\pcap directory on the
PC.
Open a DOS window and from the c:\pcap directory, open the PCAP file
ethernet.cap by using the openpcap executable. For example, enter this
command (syntax is
openpcap ethernet.cap ether1.cap
You are prompted for a password.
openpcap <input_file> <output_file>)
openpcap
.
: