Packet Capture Command Set - ADTRAN AOS Version R10.1.0 Command Reference Manual

Command Reference Guide

Packet Capture Command Set

P C C S
ACKET APTURE OMMAND ET
The AOS packet capture feature is used with network monitoring to effectively capture data packets as
they traverse the network. As data packets pass through an interface on which the packet capture feature is
enabled, a packet-capture monitors the traffic and captures the header and payload of specified packets as
they pass through. The captured packets are then exported and stored in either flash memory or
CompactFlash storage, and can then be reviewed to determine the cause of network problems, identify
security threats, and to maintain efficient data transmission over the network.
In AOS, packet capturing can be attached to one or more interfaces on the device, and can capture Internet
Protocol version 4 (IPv4) packets on Layer 3 of the network open systems interconnection (OSI) model.
Packet-captures capture both ingress and egress packets on the interface, and can export the captured
packets to a Trivial File Transfer Protocol (TFTP) server, flash memory, or CompactFlash memory in
libpcap format with a .pcap file extension. Each packet-capture can be limited to only capturing a specified
type of traffic by using an access control list (ACL) to specify what type of traffic the packet-capture
should capture. The packet-capture works on user-configured size and time limits, which determine when
the Pcap file is exported and another capture is initiated. When the size or time limit for a packet-capture
expires, the Pcap file is exported. At this point, the limits reset and a new Pcap file is created for
subsequently captured packets.
There are two types of packet-captures available in AOS products: a standard packet-capture, and a
Session Initiation Protocol (SIP) packet-capture. Standard packet-captures capture packets from all
interfaces on which a packet-capture is attached, and archive these captures into a single Pcap file that is
exported at regular intervals (based on the packet-capture's size and time limit configuration). The packets
captured by standard packet-captures include all ingress and egress IPv4 packets allowed by the ACL
associated with the packet-capture, for every interface on which the packet-capture is attached. SIP
packet-captures differ from standard packet-captures in that they focus on capturing SIP packets, rather
than all allowed IPv4 packets. These packet-captures capture all ingress or egress User Datagram Protocol
(UDP) packets that are related to SIP messages, including those related to back-to-back user agent
(B2BUA) calls, proxy calls, and messages not related to any call.
For more information about packet capturing, and its implementation and configuration in AOS, refer to
the configuration guide Configuring Packet Capture in AOS, available online at
http://supportforums.adtran.com (article number 3528).
To create a standard packet-capture, and enter the Packet Capture Configuration mode, enter the following
command from the Global Configuration mode:
(config)#packet-capture 1CAPTURE standard
(config-packet-capture-1CAPTURE)#
To create a SIP packet-capture, and enter the Packet Capture Configuration mode, enter the following
command from the Global Configuration mode:
(config)#packet-capture 1CAPTURE sip
(config-packet-capture-1CAPTURE)#
60000CRG0-35E Copyright © 2012 ADTRAN, Inc. 3259