Example Of Capturing Specific Traffic With Pcap And Acls - Avaya 8800 Troubleshooting Manual

3. Create capture-filter 2 and configure to drop all traffic. This is required so that you
4. Enable PCAP globally and reset the PCAP statistics:
5. View the PCAP filters:

Example of capturing specific traffic with PCAP and ACLs

Procedure steps
1. Disable PCAP:
2. Create ACL 1 and configure it to capture traffic with a source IP address of
3. Configure PCAP on port 7/26 and enable the mode to allow capture using ACLs:
Troubleshooting
only capture traffic using the criteria from step 2.
ERS8600-B:5# config diag pcap capture-filter 2 create
ERS8600-B:5# config diag pcap capture-filter 2 action drop
ERS8600-B:5# config diag pcap capture-filter 2 enable true
ERS8600-B:5# config diag pcap reset-stat true
ERS8600-B:5# config diag pcap enable true
ERS8600-B:5# show diag pcap capture-filter
ERS8600-B:5# config diag pcap enable false
10.1.1.100 and UDP port 1025.
ERS8600-B:5# config filter act 1 create
ERS8600-B:5# config filter act 1 ip srcIp,dstIp
ERS8600-B:5# config filter act 1 protocol
udpSrcPort,udpDstPort
ERS8600-B:5# config filter act 1 apply
ERS8600-B:5# config filter acl 1 create inPort act 1
ERS8600-B:5# config filter acl 1 port add 7/26
ERS8600-B:5# config filter acl 1 ace 1 create name "one"
ERS8600-B:5# config filter acl 1 ace 1 action permit
ERS8600-B:5# config filter acl 1 ace 1 ip src-ip eq
10.1.1.100
ERS8600-B:5# config filter acl 1 ace 1 protocol udp-dst-port
eq 69
ERS8600-B:5# config filter acl 1 ace 1 enable
PCAP configuration
July 2013 179