Avaya G430 Manual page 385

2. To disable packet sniffing, enter no capture-service.
Limiting packet sniffing to specific interfaces
About this task
By default, the packet sniffing service captures packets and Ethernet frames from all the
router's interfaces. You can use the capture interface command to limit packet sniffing
to a specific interface.
For example, the following command limits packet sniffing to the FastEthernet Interface:
Gxxx-001(super)# capture interface fastethernet 10/3
Done!
Gxxx-001(super)#
The following command enables packet sniffing on all available interfaces:
Gxxx-001(super)# capture interface any
Done!
Gxxx-001(super)#
Capture lists
By default, the packet sniffing service captures all packets passing through the interfaces on
which it is enabled. Use a capture list to selectively filter the packets that are captured by the
service.
A capture list contains an ordered list of rules and actions. A rule specifies criteria against which
packets are tested. The action tells the Branch Gateway whether to capture or not capture
packets matching the rule criteria. Only packets that match the specified criteria and have an
action of capture are captured to the capture file. The rules are evaluated one by one,
according to their number. If none of the rules match the packet, the default action is executed.
You can set the default action as desired. Use the command ip-rule default to set the
default action.
Note:
ARP frames are not IP packets and therefore cannot be filtered by capture lists. However,
in a healthy network, the ARP frames rate is relatively low.
Administering Avaya G430 Branch Gateway
Note:
The packet sniffing service can only be enabled by an administrator connecting
with a serial cable to the Branch Gateway Services port.
Monitoring applications
October 2013 385