ZyXEL Communications ZYWALL - CLI Reference Manual page 354

Chapter 43 Maintenance Tools
Table 196 Maintenance Tools Commands in Privilege Mode (continued)
COMMAND
duration <0..300>
file-suffix <profile_name>
files-size <1..10000>
host-ip {ip-address | profile_name | any>
host-port <0..65535>
iface {add | del} {interface_name |
virtual_interface_name}
ip-type {icmp | igmp | igrp | pim | ah |
esp | vrrp | udp | tcp | any}
snaplen <68..1512>
storage <internal|usbstorage>
ring-buffer <enable|disable>
split-size <1..2048>
354
DESCRIPTION
Sets a time limit in seconds for the capture. The
ZyWALL stops the capture and generates the
capture file when either this period of time has
passed or the file reaches the size specified using
the files-size command below. 0 means there
is no time limit.
Specifies text to add to the end of the file name
(before the dot and filename extension) to help you
identify the packet capture files. Modifying the file
suffix also avoids making new capture files that
overwrite existing files of the same name.
The file name format is "interface name-file
suffix.cap", for example "vlan2-packet-
capture.cap".
Specify a maximum size limit in kilobytes for the
total combined size of all the capture files on the
ZyWALL, including any existing capture files and
any new capture files you generate.
The ZyWALL stops the capture and generates the
capture file when either the file reaches this size or
the time period specified ( using the duration
command above) expires.
Note: If you have existing capture files
you may need to set this size larger
or delete existing capture files.
Sets a host IP address or a host IP address object
for which to capture packets. any means to capture
packets for all hosts.
If you set the IP Type to any, tcp, or udp using the
ip-type command below, you can specify the
port number of traffic to capture.
Adds or deletes an interface or a virtual interface
for which to capture packets to the capture
interfaces list.
Sets the protocol of traffic for which to capture
packets. any means to capture packets for all
types of traffic.
Specifies the maximum number of bytes to capture
per packet. The ZyWALL automatically truncates
packets that exceed this size. As a result, when
you view the packet capture files in a packet
analyzer, the actual size of the packets may be
larger than the size of captured packets.
Sets to have the ZyWALL only store packet capture
entries on the ZyWALL (internal) or on a USB
storage connected to the ZyWALL.
Enables or disables the ring buffer used as a
temporary storage.
Specify a maximum size limit in megabytes for
individual packet capture files. After a packet
capture file reaches this size, the ZyWALL starts
another packet capture file.
ZyWALL (ZLD) CLI Reference Guide