Cisco Catalyst 4500 series Administration Manual page 1511

Chapter 59 Configuring Wireshark
4.000000
5.000000
6.000000
7.000000
8.000000
9.000000
[Wait for about 10 secs]
Switch# show monitor capture mycap buffer brief
0.000000
1.000000
2.000000
3.000000
4.000000
5.000000
6.000000
7.000000
8.000000
9.000000
Clear the packets from the buffer by entering:
Step 6
Switch# monitor capture mycap clear
Confirm that the buffer is now empty by entering:
Step 7
Switch# show monitor capture mycap buffer brief
Wait about 10 seconds.
Step 8 Display the buffer contents.
Switch# show monitor capture mycap buffer brief
Restart the traffic, wait about 10 seconds, then display buffer contents by entering:
Step 9
Switch# show monitor capture mycap buffer brief
0.000000
1.000000
2.000000
3.000000
4.000000
5.000000
6.000000
7.000000
8.000000
9.000000
10.000000
Step 10 Store the buffer contents to the mycap1.pcap file in the internal bootflash: storage device.
Switch# monitor capture mycap export bootflash:mycap1.pcap
Exported Successfully
Check that the file has been created and that it contains the packets by entering:
Step 11
Switch# dir bootflash:mycap1.pcap
Directory of bootflash:/mycap1.pcap
14758
831541248 bytes total (831340544 bytes free)
Switch# show monitor capture file bootflash:mycap1.pcap brief
1
20002
OL_28731-01
10.1.1.6 -> 20.1.1.2
10.1.1.7 -> 20.1.1.2
10.1.1.8 -> 20.1.1.2
10.1.1.9 -> 20.1.1.2
10.1.1.10 -> 20.1.1.2
10.1.1.11 -> 20.1.1.2
10.1.1.2 -> 20.1.1.2
10.1.1.3 -> 20.1.1.2
10.1.1.4 -> 20.1.1.2
10.1.1.5 -> 20.1.1.2
10.1.1.6 -> 20.1.1.2
10.1.1.7 -> 20.1.1.2
10.1.1.8 -> 20.1.1.2
10.1.1.9 -> 20.1.1.2
10.1.1.10 -> 20.1.1.2
10.1.1.11 -> 20.1.1.2
10.1.1.2 -> 20.1.1.2
10.1.1.3 -> 20.1.1.2
10.1.1.4 -> 20.1.1.2
10.1.1.5 -> 20.1.1.2
10.1.1.6 -> 20.1.1.2
10.1.1.7 -> 20.1.1.2
10.1.1.8 -> 20.1.1.2
10.1.1.9 -> 20.1.1.2
10.1.1.10 -> 20.1.1.2
10.1.1.11 -> 20.1.1.2
10.1.1.12 -> 20.1.1.2
-rw- 20152 Apr 15 2012 16:00:28 -07:00
0.000000 10.1.1.2 -> 20.1.1.2
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
UDP Source port: 20001
Software Configuration Guide—Release IOS XE 3.6.0E and IOS 15.2(2)E
Usage Examples for Wireshark
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
Destination port: 20002
mycap1.pcap
Destination port:
59-23