Cisco Catalyst 4500 Series Software Configuration Manual page 61

Guidelines for Wireshark
Restrictions for Wireshark
Information about Wireshark
Capture Points
68-6
Attachment Points
68-6
Filters
68-6
Core System Filter
Capture Filter
68-7
Display Filter
68-7
Input and Output Classification
Actions
68-8
Storing Captured Packets to Buffer in Memory
Storing Captured Packets to a .pcap File
Decoding and Displaying Packets
Displaying Live Traffic
Displaying from the .pcap File
Storing and Displaying Packets
Activating and Deactivating Wireshark Capture Points
Wireshark Features used in Switches
Wireshark on VSS
68-11
How to Configure Wireshark
Default Wireshark Configuration
Defining, Modifying, or Deleting a Capture Point
Examples
68-13
Activating and Deactivating a Capture Point
Configuring Wireshark on VSS
Monitoring Wireshark
68-14
Configuration Examples for Wireshark
Example: Displaying a Brief Output from a .pcap File
Example: Displaying Detailed Output from a .pcap File
Example: Displaying a Hexadecimal Dump Output from a .pcap File
Example: Displaying Packets from a .pcap File with a Display Filter
Usage Examples for Wireshark
Example: Simple Capture and Display
Example: Simple Capture and Store
Example: Using Buffer Capture
Example: Capture Sessions
Example: Capture and Store in Lock-step Mode
Example: Simple Capture and Store in Lock-step with High-speed Mode
68-2
68-4
68-5
68-7
68-7
68-8
68-8
68-9
68-9
68-9
68-9
68-10
68-11
68-11
68-14
68-14
68-15
68-18
68-18
68-19
68-20
68-24
68-28
Software Configuration Guide-Release IOS XE 3.9.xE and IOS 15.2(5)Ex
68-10
68-12
68-15
68-15
68-17
68-18
68-29
Contents
57