Cisco Catalyst 3650 Series, Command Reference Manual

Page: 516 / 1108

monitor capture (interface/control plane)
To configure monitor capture points specifying an attachment point and the packet flow direction or add more
attachment points to a capture point, use the
monitor capture command in privileged EXEC mode. To disable
the monitor capture with the specified attachment point and the packet flow direction or disable one of multiple
attachment points on a capture point, use the
no form of this command.
monitor capture { capture-name }{ interface interface-type interface-id | control-plane }{ in | out | both }
no monitor capture { capture-name }{ interface interface-type interface-id | control-plane }{ in | out | both }
Syntax Description
The name of the capture to be defined. capture-name
Specifies an interface with interface-type and interface-id as an
attachment point. The arguments have these meanings:
interface interface-type interface-id
Specifies the control plane as an attachment point. control-plane
Specifies the traffic direction to be captured. in | out | both
Command Default
A Wireshark capture is not configured.
Command Modes
Privileged EXEC
Command History
Modification Release
This command was introduced. Cisco IOS XE 3.3SE
Usage Guidelines
Once an attachment point has been associated with a capture point using this command, the only way to change
its direction is to remove the attachment point using the
no form of the command and reattach the attachment
point with the new direction. An attachment point's direction cannot be overridden.
If an attachment point is removed from a capture point and only one attachment point is associated with it,
the capture point is effectively deleted.
Multiple attachment points can be associated with a capture point by re-running this command with another
attachment point. An example is provided below.
Multiple capture points can be defined, but only one can be active at a time. In other words, you have to stop
one before you can start the other.
Packets captured in the output direction of an interface might not reflect the changes made by switch rewrite
(includes TTL, VLAN tag, CoS, checksum, MAC addresses, DSCP, precedent, UP, etc.).
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
490
monitor capture (interface/control plane)