Starting The Packet Sniffing Service - Avaya G450 Manual

Tip:
To reduce the size of the capture file, use any combination of the following
Tip:
methods:
- Use the capture interface command to capture only from a specific
- Use the capture max-frame-size to capture only the first N octets of each
- Use capture lists to select specific traffic.

Starting the packet sniffing service

Once you have defined and applied the packet capture lists, use the capture start
command in general context to instruct the packet sniffing service to start capturing packets.
Note:
The capture start command resets the buffer before starting the sniffer.
Note:
Note:
You must apply a capture list using the capture filter-group command in
Note:
order for the capture list to be active. If you do not use the capture
filter-group command, the packet sniffing service captures all packets.
If packet sniffing has been enabled by the administrator, the following appears:
G450-001(super)# capture start
Starting the packet sniffing process
G450-001(super)#
If packet sniffing has not been enabled by the administrator, the following appears:
G450-001(super)# capture start
Capture service is disable
To enable, use the `capture-service` command in supervisor mode.
G450-001(super)#
Capturing decrypted IPSec VPN packets
IPSec VPN packets are encrypted packets. The contents of encrypted packets cannot be
viewed when captured. However, you can use the capture ipsec command to specify that
IPSec VPN packets, handled by the internal VPN gateway process, should be captured in plain
text format.
interface.
frame. This is valuable since it is usually the packets headers that contain the
interesting information.
Configuring and analyzing packet sniffing
Issue 1 January 2008 425