Juniper JUNOS OS 10.3 - SOFTWARE Manual page 753

Table 123: Packet Capture Field Summary (continued)
Field Function
Addresses Specifies the addresses to be matched for capturing the
packets using a combination of the following parameters:
Direction—Matches the packet headers for IP address,
hostname, or network address of the source, destination
or both.
Type—Specifies if packet headers are matched for host
address or network address.
You can add multiple entries to refine the match criteria
for addresses.
Protocols Matches the protocol for which packets are captured. You
can choose to capture TCP, UDP, or ICMP packets or a
combination of TCP, UDP, and ICMP packets.
Ports Matches packet headers containing the specified source
or destination TCP or UDP port number or port name.
Advanced Options
Absolute TCP Specifies that absolute TCP sequence numbers are to be
Sequence displayed for the packet headers.
Layer 2 Headers Specifies that link-layer packet headers are to be
displayed.
Non-Promiscuous Specifies not to place the interface in promiscuous mode,
so that the interface reads only packets addressed to it.
In promiscuous mode, the interface reads every packet
that reaches it.
Display Hex Specifies that packet headers, except link-layer headers,
are to be displayed in hexadecimal format.
Display ASCII and Specifies that packet headers are to be displayed in
Hex hexadecimal and ASCII format.
Header Expression Specifies the match condition for the packets to be
captured. The match conditions you specify for Addresses,
Protocols, and Ports are displayed in expression format
in this field.
Packet Size Specifies the number of bytes to be displayed for each
packet. If a packet header exceeds this size, the display is
truncated for the packet header. The default value is 96
bytes.
Copyright © 2010, Juniper Networks, Inc.
Chapter 40: Administering and Monitoring System Functions
Your Action
Select address-matching criteria. For
example:
1. From the Direction list, select
2. From the Type list, select
3. In the Address box, type
4. Click Add .
From the list, select a protocol—for example,
tcp.
Select a direction and a port. For example:
From the Type list, select
In the Port box, type
To display absolute TCP sequence numbers
in the packet headers, select this check box.
To include link-layer packet headers while
capturing packets, select this check box.
To read all packets that reach the interface,
select this check box.
To display the packet headers in hexadecimal
format, select this check box.
To display the packet headers in ASCII and
hexadecimal formats, select this check box.
You can enter match conditions directly in
this field in expression format or modify the
expression composed from the match
conditions you specified for Addresses,
Protocols, and Ports. If you change the match
conditions specified for Addresses, Protocols,
and Ports again, packet capture overwrites
your changes with the new match conditions.
Type the number of bytes you want to capture
for each packet header—for example,
.
source
.
host
10.1.40.48 .
.
src
23 .
.
256
657