Creating A Capture List; Defining Rule Criteria For A Capture List - Avaya G250 Administration

Configuring monitoring applications

Creating a capture list

By default, the packet sniffing service captures all packets passing through the interfaces on
which it is enabled. Use a capture list to selectively filter the packets that are captured by the
service.
A capture list contains an ordered list of rules and actions. A rule specifies criteria against which
packets are tested. The action tells the G250/G350 whether to capture or not capture packets
matching the rule criteria. Only packets that match the specified criteria and have an action of
capture are captured to the capture file. The rules are evaluated one by one, according to
their number. If none of the rules match the packet, the default action is executed. You can set
the default action as desired. Use the command ip-rule default to set the default action.
Note:
ARP frames are not IP packets and therefore cannot be filtered by capture lists.
Note:
However, in a healthy network, the ARP frames rate is relatively low.
Use the ip capture-list command, followed by the list number, to enter the context of a
capture list (and to create the capture list if it does not exist). Capture lists are numbered from
500 to 599. For example:
G350-001(super)# ip capture-list 510
G350-001(super-Capture 510)#
You can use the following commands to set the parameters of the capture list:
Use the name command to assign a name to the capture list.
●
Use the owner command to record the name of the person that created the list.
●
Use the ip-rule command to define rule criteria for the capture list. The following section
●
explains rule criteria in detail.
Note:
You can use the cookie command to set the list cookie for the capture list.
Note:
However, capture list cookies are not currently used by any application.

Defining rule criteria for a capture list

Once in the capture list context, use the ip-rule command, followed by a number between 1
and 9999, to define a set of criteria against which to test packets. In addition to the rule criteria,
each rule must include a composite operation. The composite operation determines the action
the rule takes with respect to packets that match the rule criteria, and can be one of the
following:
capture
●
no-capture
●
284 Administration for the Avaya G250 and Avaya G350 Media Gateways