Capture Packets From The Command Line - Digi Connect IT 4 User Manual

Diagnostics
where protocol is a number in the range of 1 to 255 or one of the following keywords: icmp,
icmp6, igmp, pim, ah, esp, vrrp, udp, or tcp.
Capture traffic to and from a TCP port 80:
n
ip proto tcp and port 80
Capture traffic to UDP port 53:
n
ip proto udp and dst port 53
Capture traffic from UDP port 53:
n
ip proto udp and src port 53
Capture to and from IP host 10.0.0.1 but filter out ports 22 and 80:
n
ip host 10.0.0.1 and not (port 22 or port 80)
Example Ethernet capture filters
Capture Ethernet packets to and from a host with a MAC address of 00:40:D0:13:35:36:
n
ether host 00:40:D0:13:35:36
Capture Ethernet packets from host 00:40:D0:13:35:36:
n
ether src 00:40:D0:13:35:36:
Capture Ethernet packets to host 00:40:D0:13:35:36:
n
ether dst 00:40:D0:13:35:36

Capture packets from the command line

You can start packet capture at the command line with the
can schedule the network analyzer to run based on a specified event or at a particular time. See
Configure packet capture for the network analyzer
Additional analyzer commands allow you to:
Stop capturing
n
Save captured data traffic to a
n
Clear captured
n
Required configuration items
A configured packet capture. See
n
packet capture configuration information.
To start packet capture from the command line:

Command line
Digi Connect IT® 4 User Guide
packets.
file.
data.
Configure packet capture for the network analyzer
analyzer start command. Alternatively, you
for information about scheduling packet capturing.
Analyze network traffic
for
877