debug capture data physical stop
This command stops capturing files.
Syntax
debug capture data physical stop <Server IP> vrf <VRF name>
|
Arguments |
Description |
|---|---|
|
<Server IP> |
Defines the IP address of the TFTP/FTP server. |
|
vrf <name> |
Defines the VRF name. |
Default
By default, capture is inactive.
Note:
| ■ | The captured data is collected locally, and only then sent to the PC later on. |
| ■ | The usb option is only applicable when a USB stick is connected to the device. |
| ■ | Once the start command is issued, recording is performed to an in-memory buffer. If the buffer becomes full, recording stops. |
| ■ | The stop command creates a file named debug-capture-data-<timestamp>.pcap and sends it to the TFTP server. The TFTP server must be configured to allow file uploads. |
| ■ | The generated PCAP file is in the Extensible Record Format (ERF); recent versions of Wireshark (1.5.0 or newer) are recommended for proper dissection. |
| ■ | Wireshark's ERF settings must be configured as follows: |
Command Mode
Enable
Related Commands
NA
Examples
The debug capture is de-activated using the following existing commands:
# debug capture data physical stop 192.168.0.3 vrf vrf1 Trying to send capture to TFTP/FTP server , filename debug-capture-data-16032014-154400 Finished