313
•
Interfaces on an LSUM1TGS48SG0 (JH197A, JH205A) interface module do not support
packet capture.
Packet capture configuration task list
Tasks at a glance
Remarks
Configuring local packet capture
Perform one of the tasks.
Configuring remote packet capture
Configuring feature image-based packet capture
Configuring local packet capture
To display the captured packets on the local device, use the
packet-capture read
command. To
display the captured packets on the FTP server, use the Wireshark client connected to the FTP
server. To stop the capture, use the
packet-capture stop
command.
To configure local packet capture:
Task
Command
Remarks
Configure local packet
capture.
packet-capture
local
interface
interface-type
interface-number
[
capture-filter
capt-expression
|
limit-frame-size
bytes
|
autostop
filesize
kilobytes
|
autostop
duration seconds
] *
write
{
filepath
|
url
url
[
username
username
[
password
{
cipher
|
simple
}
string
] ] }
After this command is executed,
you can still configure other
commands from the CLI. The
operation does not affect the
packet capture.
Configuring remote packet capture
Task
Command
Remarks
Configure remote packet
capture.
packet-capture
remote
interface
interface-type
interface-number
[
port
port
]
To stop the capture, use the
packet-capture stop
command.
To display the captured packets, perform the following tasks:
1.
Connect the Wireshark client to the device that captures packets.
2.
Start Wireshark and select
Capture
>
Options
.
3.
Select
Remote
from the
Interface
list.
4.
Enter the IP address of the remote interface and the RPCAP service port number on the
window that appears, and click
OK
.
Make sure the interface IP address is reachable for the Wireshark. If you do not specify the
RPCAP service port number, the default RPCAP service port 2002 is used.
5.
Click
Start
.