Diagnostics
Analyze network traffic
LR54 User Guide
1017
Example IPv4 capture filters
n
Capture traffic to and from IP host 192.168.1.1:
ip host 192.168.1.1
n
Capture traffic from IP host 192.168.1.1:
ip src host 192.168.1.1
n
Capture traffic to IP host 192.168.1.1:
ip dst host 192.168.1.1
n
Capture traffic for a particular IP protocol:
ip proto
protocol
where
protocol
is a number in the range of
1
to
255
or one of the following keywords:
icmp
,
icmp6
,
igmp
,
pim
,
ah
,
esp
,
vrrp
,
udp
, or
tcp
.
n
Capture traffic to and from a TCP port 80:
ip proto tcp and port 80
n
Capture traffic to UDP port 53:
ip proto udp and dst port 53
n
Capture traffic from UDP port 53:
ip proto udp and src port 53
n
Capture to and from IP host 10.0.0.1 but filter out ports 22 and 80:
ip host 10.0.0.1 and not (port 22 or port 80)
Example Ethernet capture filters
n
Capture Ethernet packets to and from a host with a MAC address of 00:40:D0:13:35:36:
ether host 00:40:D0:13:35:36
n
Capture Ethernet packets from host 00:40:D0:13:35:36:
ether src 00:40:D0:13:35:36:
n
Capture Ethernet packets to host 00:40:D0:13:35:36:
ether dst 00:40:D0:13:35:36
Capture packets from the command line
You can start packet capture at the command line with the
command. Alternatively, you
can schedule the network analyzer to run based on a specified event or at a particular time. See
Configure packet capture for the network analyzer
for information about scheduling packet capturing.
