About Packet Display And Capture - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Displaying and Capturing Live Traffic on an
Interface
This chapter describes how to display, capture, copy, and erase packet files. It contains the following
sections:
•
•
•
•
•

About Packet Display and Capture

You can display or capture live traffic from an interface and have the live traffic or a previously captured
file put directly on the screen. Storage is available for one local file only, subsequent capture requests
overwrites an existing file. The size of the storage file varies depending on the platform. A message may
be displayed if the maximum file size is reached before the requested packet count is captured.
Capturing live traffic off the interface does not disrupt any of the functionality of the sensor.
Note
Caution Changing the interface configuration results in abnormal termination of any packet command running
on that interface.
Executing the packet display or capture command causes significant performance degradation.
Caution
78-16527-01
About Packet Display and Capture, page 9-1
Displaying Live Traffic on an Interface, page 9-2
Capturing Live Traffic on an Interface, page 9-4
Copying the Packet File, page 9-6
Erasing the Packet File, page 9-7
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
9
C H A P T E R
9-1