Avaya G430 Manual page 392

Monitoring applications
The following commands create a capture list that captures all traffic from subnet
135.122.50.149 255.255.255.254 to an ECC at address 135.122.50.171, except telnet:
Gxxx-001(super)# ip capture-list 511
Gxxx-001(super-Capture 511)# name "list #511"
Done!
! Rules 10 and 15 provide that telnet packets are not captured.
Gxxx-001(super-Capture 511)# ip-rule 10
Gxxx-001(super-Capture 511/ip rule 10)# composite-operation no-capture
Done!
Gxxx-001(super-Capture 511/ip rule 10)# ip-protocol tcp
Done!
! You can use a port number instead of "telenet"
(23).
Gxxx-001(super-Capture 511/ip rule 10)# tcp destination-port eq telnet
Done!
Gxxx-001(super-Capture 511/ip rule 10)# exit
Gxxx-001(super-Capture 511)#
Gxxx-001(super-Capture 511)# ip-rule 15
Gxxx-001(super-Capture 511/ip rule 15)# composite-operation no-capture
Done!
Gxxx-001(super-Capture 511/ip rule 15)# ip-protocol tcp
Done!
! You can use a port number instead of "telenet"
(23).
Gxxx-001(super-Capture 511/ip rule 15)# tcp source-port eq telnet
Done!
Gxxx-001(super-Capture 511/ip rule 15)# exit
! Rule 20 provides for capturing any packet coming from the host IP address
! 135.122.50.171 and going to the subnet 135.122.50.128, including packets going
! to any of the 30 possible hosts in that subnet.
Gxxx-001(super-Capture 511)# ip-rule 20
Gxxx-001(super-Capture 511/ip rule 20)# ip-protocol tcp
Done!
Gxxx-001(super-Capture 511/ip rule 20)# source-ip host 135.122.50.171
Done!
Gxxx-001(super-Capture 511/ip rule 20)# destination-ip 135.122.50.128 0.0.0.31
Done!
Gxxx-001(super-Capture 511/ip rule 20)# exit
! Rule 30 provides for capturing any packet coming from the subnet
! 135.122.50.128 and going to the host IP address 135.122.50.171, including
! packets from any of the 30 possible hosts in that subnet.
Gxxx-001(super-Capture 511)# ip-rule 30
Gxxx-001(super-Capture 511/ip rule 30)# source-ip 135.122.50.128 0.0.0.31
Done!
Gxxx-001(super-Capture 511/ip rule 30)# destination-ip host 135.122.50.171
Done!
Gxxx-001(super-Capture 511/ip rule 30)# exit
Gxxx-001(super-Capture 511)# ip-rule default
Gxxx-001(super-Capture 511/ip rule default)# composite-operation no-capture
Done!
Gxxx-001(super-Capture 511/ip rule default)# exit
Gxxx-001(super-Capture 511)# exit
Gxxx-001(super)#
Viewing the capture list
Procedure
Use the show ip capture-list command to display the capture list in an easy-to-
read format.
392 Administering Avaya G430 Branch Gateway
Capture list example
Comments? infodev@avaya.com
October 2013