Acopia Adaptive Resource Switch, Cli Maintenance Manual

Page: 200 / 324

Troubleshooting Network Connections
Capturing IP Traffic in a File
7-26 CLI Maintenance Guide
Copying the Capture File to an FTP Server
Like the syslog file, you can save the capture file off to a remote FTP server for
further analysis. On the remote machine, you can use the graphical
Wireshark/Ethereal program or the CLI-based Tethereal program to view the capture
file. The file is formatted to be legible by any program that supports the Packet
Capture (Pcap, or WinPcap) library.
From priv-exec mode, use the
copy capture
command and specify the FTP server in a
destination URL:
copy capture capture-file ftp://[ username : password @] ftp-site / file
where
capture-file identifies the capture file to copy,
username : password @ (optional) is an FTP username and password (the
default is set by the
ip ftp-user
command, as shown in “Setting a Default FTP
User” on page 3-1 ),
ftp-site identifies the FTP server with an IP address or FQDN (for example,
“172.16.88.3” or “ftp.myftpsite.com”), and
file is the chosen file name. Lead with an extra “/” if the path starts at the
root of the server machine; for example, “jupiter//var/log/pcapture2.cap”
specifies “/var/log/pcapture2.cap” on server jupiter. Omit the leading slash if
the file is going to the home directory for
username . Keep the “.cap”
extension, as this is recognized by the Wireshark/Ethereal and tethereal
programs.
For example, the following command exits from cfg mode to priv-exec mode, then
copies the “clientCap.cap” file to a remote server:
bstnA6k(cfg)# exit
bstnA6k# copy capture clientCap.cap ftp://juser:jpasswd@ftp.wwmed.com//var/caps/client.cap
bstnA6k# ...