debug capture data interface

This command captures network traffic on one of the data sub-system network interfaces.

Syntax

The syntax of this command includes the following variations:

debug capture data interface <interface type> <interface ID> [ipsec]  proto <protocol filter> host <host filter> 
debug capture data interface <interface type> <interface ID> [ipsec] proto <protocol> host <host filter> port <port filter>
debug capture data interface <interface type> <interface ID> [ipsec] proto <protocol> host <host filter> port <port filter> tftp-server <tftp server ip address>
debug capture data interface <interface type> <interface ID> [ipsec] proto  udp <host filter> any port <port filter> ftp-server <ftp server ip address>

The command's syntax format is described below:

Arguments

Description

interface type interface ID

Defines the Interface Type and ID of the network interface on which to start the debug capture process. Each interface type has its own interface ID options:

vlan <vlan number>
GigabitEthernet <slot/port>
GigabitEthernet <slot/port.vlan number>

protocol filter

Captures specific protocol, or all protocols. Available options are:

all
ip
ipv6
tcp
udp
arp
icmp

host filter

Captures traffic from/to a specific host (IP address), or any.

port filter

Captures traffic from/to a specific port. Valid ports are 1-65535, or the keyword any. When using arp or icmp as protocol filter, port filter cannot be used, and the only valid value is any. This argument is optional.

tftp server ip address

When this argument is omitted, captured traffic is printed to the CLI console. When using this argument, the captured traffic is saved to a file in pcap format, and when the capture is stopped (using ctrl-c), the capture file is uploaded, via TFTP, to the TFTP server specified in this argument.

The TFTP server IP address specified in this argument must be accessible from one of the data sub-system network interfaces, so that the capture file will be uploaded to the server successfully. Use ping test to make sure this TFTP server is accessible. This argument is optional.

ftp server ip address

This command provides support for sending debug captures to an FTP server.

Note: This is only applicable to MSBR devices.

Default

NA

Command Mode

Enable

Related Commands

debug capture voip

Examples

The following example starts a debug capture on the network interface vlan 77, with a protocol filter (tcp), a host filter (192.168.0.15), and a port filter (80). The captured traffic will be printed to the CLI session:

# debug capture data interface vlan 77 proto tcp host 192.168.0.15 port 80

The following example starts a debug capture on the network interface GigabitEthernet 0/0, with a protocol filter (udp), no host filter, and no port filter. The captured traffic will be saved to a temporary file, and will be sent, when ctrl-c is used, to the TFTP server at address 192.168.1.12. This server is accessible via network interface vlan 1:

# debug capture data interface GigabitEthernet 0/0 proto udp host any port any tftp-server 192.168.0.15