410
Purpose Options
Remarks
capture-ring-buffer
duration
seconds
•
Rotate based on the file size
specified for the
autostop
filesize
kilobytes
option:
autostop
files
numbers
autostop
filesize
kilobytes
autostop
filesize
kilobytes
capture-ring-buffer
files
numbers
filesize
option, the capture rotates the
file based on the file size specified for
the
autostop filesize
option.
Examples
# Capture incoming packets on GigabitEthernet 1/0/1.
<Sysname> packet-capture interface gigabitethernet 1/0/1
Related commands
packet-capture read
packet-capture read
Use
packet-capture read
to display the contents in a packet file.
Syntax
packet-capture read
filepath
[
verbose
] [
display-filter
disp-expression
] [
raw
| {
brief
|
verbose
} ]
*
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
filepath
: Specifies the full path of the packet file to store captured packet data. The path must be a
case-sensitive string of up to 64 characters. The filename extension must be
.pcap
or
.pcapng
. For
more information about setting a file path, see file system management in
Fundamentals
Configuration Guide
.
display-filter
disp-expression
: Specifies an expression to match packets to be displayed. If you do
not specify a display filter expression, this command displays all file contents.
raw
: Displays file contents in hexadecimal notation. If you do not specify this keyword, the capture
displays packet data in a human-readable format.
brief
: Displays brief information about captured packets in the file.
verbose
: Displays detailed information about captured packets in the file. If you do not specify the
raw
,
brief
, or
verbose
keyword, this command displays brief information about captured packets in
the file.
Usage guidelines
To stop displaying the file contents, press
Ctrl+C
.
Examples
# Display the contents in the file
flash:/test/aaaa.pcap
.
<Sysname> packet-capture read flash:/test/aaaa.pcap
