Example Of Capturing Specific Traffic With Pcap Filters - Avaya 8800 Troubleshooting Manual

Software troubleshooting tool configuration using CLI
3. Enable PCAP globally and enable PCAP on port 7/26 to capture traffic in both
4. View your PCAP configuration:
5. View the real-time PCAP statistics:
6. Stop PCAP and save the captured traffic DRAM contents:
7. Forward the captured file to a server.

Example of capturing specific traffic with PCAP filters

Procedure steps
1. Ensure PCAP is disabled:
2. Create capture-filter 1 and configure it to capture traffic with a source IP address of
178 Troubleshooting
ERS8600-B:5# show sys perf
directions:
ERS8600-B:5# config diag pcap enable true
ERS8600-B:5# config ethernet 7/26 pcap enable true mode both
ERS8600-B:5# config diag pcap info
ERS8610-B:5# show diag pcap port
ERS8610-B:5# show diag pcap stat
Captured traffic is written to the backup CPU PCMCIA (or external flash) card when
the number of packets received in the PCAP engine equals the packet capacity
count. If the PCAP wrap parameter is enabled, captured traffic continuously
overwrites to the PCMCIA (or external flash) file.
ERS8610-B:5# config diag pcap enable false ERS8610-B:5# copy
PCAP00 /pcmcia/capture.cap
ERS8610-B:5# peer telnet
ERS8610-B:6# copy /pcmcia/capture.cap 10.99.99.1:capture.cap
ERS8600-B:5# config diag pcap enable false
10.1.1.100 and a UDP port 1025:
ERS8600-B:5# config diag pcap capture-filter 1 create
ERS8600-B:5# config diag pcap capture-filter 1 action capture
ERS8600-B:5# config diag pcap capture-filter 1 srcip
10.1.1.100
ERS8600-B:5# config diag pcap capture-filter 1 udp-port 1025
ERS8600-B:5# config diag pcap capture-filter 1 enable true
Comments? infodev@avaya.com
July 2013