Debug Capturing On Voip Interfaces - AudioCodes Mediant 800 User Manual

CHAPTER 62 Syslog and Debug Recording
# debug capture voip physical eth-lan
# debug capture voip physical start
■ Captures packets continuously in a cyclical buffer (packets always captured until stop
command):
# debug capture VoIP physical cyclic buffer
■ Retrieves latest capture (PCAP file) saved on a specified server:
# debug capture VoIP physical get_last_capture <TFTP/FTP server IP address>
The file is saved to the device's memory (not flash) and erased after a device reset.
■ Marks the captured file (useful for troubleshooting process):
# debug capture VoIP physical insert-pad
Before running this command, the debug capture must be started.
■ Displays debug status and configured rules:
# debug capture VoIP physical show
■ Specifies the destination (FTP, TFTP, or USB) where you want the PCAP file sent:
# debug capture VoIP physical target <ftp|tftp|usb>
■ Stops the debug capture, creates a file named debug-capture-voip-<timestamp>.pcap, and
sends it to the TFTP or FTP server:
# debug capture voip physical stop <TFTP/FTP server IP address>
If no IP address is defined, the capture is saved on the device for later retrieval.

Debug Capturing on VoIP Interfaces

You can capture network traffic on the device's VoIP interfaces per VLAN device that is configured
in the Ethernet Devices table (see
send the captured traffic to the following:
■ CLI terminal screen (tcpdump format): The captured network packets are displayed in the CLI
until you end the capture by pressing the CTRL + C key combination.
■ Remote server (TFTP or FTP): The capture is saved as a PCAP file (suitable for Wireshark)
and sent to a specified server (default is TFTP) . The generated PCAP file is in the Extensible
Record Format (ERF) and is saved on the device during the capture. The maximum file size
that can be saved to the device is 10 MB and as long as the capture continues, the packets are
written to this 10-MB file in a cyclic manner. When you end the capture (by pressing the CTRL
+ C key-combination), the device sends the capture file to the server.
➢
To capture traffic on a VLAN VoIP device:
1. Define the VLAN ID on which you want to do the capture:
# debug capture voip interface vlan <VLAN ID>
2. Define the protocol that you want to capture (all|arp|icmp|ip|ipv6|tcp|udp):
Mediant 800 Gateway & E-SBC | User's Manual
Configuring Underlying Ethernet Devices
- 1117 -
on page 94). You can