ShoreTel 4500 Installation Manual page 66

Tools and Troubleshooting
4. Identify the PPP session associated with a given phone by obtaining the IP address of the
phone from the
phone has been identified, use the
the phone' s IP address.
5. Create the disk space to store the captured information by issuing the following
command:
6. Capture the packets on eth0, eth1, and ppp0 (assuming that ppp0 has the same IP
address as the phone) by using the following command:
tcpdump -s 0 -ni ppp0 -w /etc/images/PPP0.pcap & tcpdump -s 0 -ni eth0 host
<private IP of Phone> -w /etc/images/ETH0.pcap & tcpdump -s 0 -ni eth1 host
<WAN public IP address> –w /etc/images/ETH1.pcap
7. Next, stop the packet capture by issuing the following command:
8. FTP the captured files
ETH0.pcap
Wireshark or sent to the ShoreTel support team for analysis. You can also copy the files
from the system to your computer using WINscp if an external FTP server is
unavailable.
60
"Active Sessions" by using its MAC address. Once the IP address of the
ifconfig
mount –t tmpfs tmpfs /etc/images –o size=8m
/etc/images/ETH1.pcap, /etc/images/PPP0.pcap, /etc/images/
to the remote FTP server so that it can be viewed by a program like
command to find the PPP interface that has
killall tcpdump
Chapter 5