Configuring Termination of Debug Capture Upon Event

You can configure the device to stop a debug-traffic capture on the device's physical network interfaces upon a user-defined event. This event can be a Syslog message or an interface state-change. This feature supports all physical targets (TFTP, FTP, and USB), and SSH retrieval, as well as regular and cyclic-buffer modes. When combined with cyclic-buffer mode, this feature makes diagnosis of network problems easier.

To configure termination of debug capture upon a user-defined event or state change, use the following CLI commands:

■

Defines the Syslog message event upon which the device stops the debug capture:

# debug capture data physical auto-stop event syslog "<message>"

■

Defines a state change on a specific interface upon which the device stops the debug capture:

# debug capture data physical auto-stop event state-change <interface, e.g., GigabitEthernet 0/0>

■

Defines a state change on any interface upon which the device stops the debug capture:

# debug capture data physical auto-stop event state-change any

■

Defines what to do with the debug capture when it is automatically stopped:

# debug capture data physical auto-stop [send <IP address>|keep]

Where:

●

send - sends the capture to the defined IP address

●

keep - saves the capture on the device for later retrieval

■

Disables the automatic stopping feature for debug captures:

# no debug capture data physical auto-stop