Monitor Capture Match - Cisco Catalyst 3650 series Command Reference Manual

monitor capture match

monitor capture match
Note Do not use this command when capturing a CAPWAP tunnel. Also, when control plane and CAPWAP
tunnels are mixed, this command will have no effect.
To define an explicit inline core filter for a monitor (Wireshark) capture, use the monitor capture match
command in privileged EXEC mode. To remove this filter, use the no form of this command.
monitor capture {capture-name} match {any | mac mac-match-string | ipv4 {any | host | protocol}{any |
host} | ipv6 {any | host | protocol}{any | host}}
no monitor capture {capture-name} match
Syntax Description
capture-name
any
mac mac-match-string
ipv4
host
protocol
ipv6
Command Default
A core filter is not configured.
Command Modes
Privileged EXEC
Command History
Release
Cisco IOS XE 3.3SE
Examples To define a capture point and the core filter for the capture point that matches to any IP version 4 packets on
the source or destination:
Device# monitor capture mycap interface GigabitEthernet1/0/1 in
Device# monitor capture mycap match ipv4 any any
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
500
The name of the capture to be assigned a core filter.
Specifies all packets.
Specifies a Layer 2 packet.
Specifies IPv4 packets.
Specifies the host.
Specifies the protocol.
Specifies IPv6 packets.
Modification
This command was introduced.