Cisco Catalyst 4500 series Administration Manual page 1513

Chapter 59 Configuring Wireshark
Switch# monitor capture mycap int gi 3/1 in match ipv4 any any
Switch# monitor capture mycap file location bootflash:mycap.pcap
Switch# monitor capture mycap limit packets 100 duration 60
Switch# monitor capture mycap start
Switch#
Switch# monitor capture mycap stop
Switch# monitor capture mycap start capture-filter "udp.port == 20001"
Switch# monitor capture mycap stop
Switch# monitor capture mycap start capture-filter "udp.port == 20001" display
A file by the same capture file name already exists, overwrite?[confirm]
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
Switch# monitor capture mycap start capture-filter "udp.port == 20001" display
display-filter "udp.port == 20002"
%Display-filter cannot be specified when capture is associated to a file. Ignoring
display
A file by the same capture file name already exists, overwrite?[confirm]
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
0.000000
Switch# monitor capture mycap start capture-filter "udp.port == 20001" display
display-filter "udp.port == 20002" detailed
%Display-filter cannot be specified when capture is associated to a file. Ignoring
display
A file by the same capture file name already exists, overwrite?[confirm]
Frame 1: 256 bytes on wire (2048 bits), 256 bytes captured (2048 bits)
Arrival Time: Dec 31, 1969 17:00:00.000000000 PDT
OL_28731-01
10.1.1.9 -> 20.1.1.2
10.1.1.10 -> 20.1.1.2
10.1.1.11 -> 20.1.1.2
10.1.1.12 -> 20.1.1.2
10.1.1.13 -> 20.1.1.2
10.1.1.14 -> 20.1.1.2
10.1.1.15 -> 20.1.1.2
10.1.1.16 -> 20.1.1.2
10.1.1.17 -> 20.1.1.2
10.1.1.18 -> 20.1.1.2
10.1.1.19 -> 20.1.1.2
10.1.1.20 -> 20.1.1.2
10.1.1.21 -> 20.1.1.2
10.1.1.22 -> 20.1.1.2
10.1.1.23 -> 20.1.1.2
10.1.1.24 -> 20.1.1.2
10.1.1.25 -> 20.1.1.2
10.1.1.26 -> 20.1.1.2
10.1.1.27 -> 20.1.1.2
10.1.1.28 -> 20.1.1.2
10.1.1.29 -> 20.1.1.2
10.1.1.30 -> 20.1.1.2
filter%
10.1.1.96 -> 20.1.1.2
10.1.1.97 -> 20.1.1.2
10.1.1.98 -> 20.1.1.2
10.1.1.99 -> 20.1.1.2
10.1.1.100 -> 20.1.1.2
10.1.1.101 -> 20.1.1.2
10.1.1.102 -> 20.1.1.2
10.1.1.103 -> 20.1.1.2
10.1.1.104 -> 20.1.1.2
10.1.1.105 -> 20.1.1.2
10.1.1.106 -> 20.1.1.2
10.1.1.107 -> 20.1.1.2
10.1.1.108 -> 20.1.1.2
10.1.1.109 -> 20.1.1.2
filter%
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
Usage Examples for Wireshark
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
59-25