Debug Capturing On Physical Voip Interfaces; Debug Capturing On Voip Interfaces - AudioCodes Mediant 4000 SBC User Manual

CHAPTER 52 Syslog and Debug Recording

Debug Capturing on Physical VoIP Interfaces

You can capture traffic on the device's physical (Ethernet LAN) VoIP interfaces (Layer-2 VLAN
tagged packets). The captured traffic can be saved in a PCAP-format file (suitable for Wireshark) to
a TFTP (default) or an FTP server. The generated PCAP file is in the Extensible Record Format
(ERF). The maximum file size of debug captures that can be saved to the device is 20 MB100 MB.
To capture traffic on physical VoIP interfaces, use the following CLI commands:
■ Starts physical VoIP debug capture:
# debug capture voip physical eth-lan
# debug capture voip physical start
■ Captures packets continuously in a cyclical buffer (packets always captured until stop
command):
# debug capture VoIP physical cyclic buffer
■ Retrieves latest capture (PCAP file) saved on a specified server:
# debug capture VoIP physical get_last_capture <TFTP/FTP server IP address>
The file is saved to the device's memory (not flash) and erased after a device reset.
■ Marks the captured file (useful for troubleshooting process):
# debug capture VoIP physical insert-pad
Before running this command, the debug capture must be started.
■ Displays debug status and configured rules:
# debug capture VoIP physical show
■ Specifies the destination (FTP, TFTP, or USB) where you want the PCAP file sent:
# debug capture VoIP physical target <ftp|tftp|usb>
■ Stops the debug capture, creates a file named debug-capture-voip-<timestamp>.pcap, and
sends it to the TFTP or FTP server:
# debug capture voip physical stop <TFTP/FTP server IP address>
If no IP address is defined, the capture is saved on the device for later retrieval.

Debug Capturing on VoIP Interfaces

You can capture network traffic on the device's VoIP interfaces per VLAN device that is configured
in the Ethernet Devices table (see
send the captured traffic to the following:
■ CLI terminal screen (tcpdump format): The captured network packets are displayed in the CLI
until you end the capture by pressing the CTRL + C key combination.
Configuring Underlying Ethernet Devices
- 831 -
Mediant 4000 SBC | User's Manual
on page 94). You can