debug capture voip interface
This command defines and starts debug capturing (recording) of network traffic on a specific VoIP network interface.
The debug capture starts when you run the command. To stop the capture, press Ctrl+C. When stopped and a server is defined, the device then sends the captured traffic (.pcap file) to the server.
Syntax
# debug capture voip interface {kernel-dev <Name>|vlan <VLAN ID>} proto <Protocol Filter> host <Host Filter> port <Port Filter>
[tftp-server <TFTP Server IPv4 or IPv6 Address>|ftp-server <FTP Server IPv4 or IPv6 Address>]
|
Command |
Description |
|||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
kernel-dev |
Defines an interface on which to debug capture by its kernel name (e.g., eth0, eth1, lo, or tun0) instead of by VLAN. You can use this option, for example, to record packets on the interface used for WebSocket tunneling. To specify all kernels, type any. |
|||||||||||||||||||||
|
vlan |
Defines the VLAN ID (instead of kernel interface) of the network interface on which to debug capture. |
|||||||||||||||||||||
|
proto |
Defines the protocol filter:
|
|||||||||||||||||||||
|
host |
Defines the host (IP address) from/to which the packets are captured. To specify all hosts, type any. |
|||||||||||||||||||||
|
port |
(Optional) Defines the port filter (1-65535 or any for all ports). When using arp or icmp as the protocol filter, port filter can't be used and the only valid value is any. |
|||||||||||||||||||||
|
ftp-server |
(Optional) Defines the IP address of the FTP server to which the captured traffic file (.pcap) is sent. If not specified, captured traffic is displayed in the CLI console. After running the command, press Ctrl+C when you want the capture to end and the captured traffic file to be sent to the server. Note: The FTP server's IP address must be accessible from one of the VoIP network interfaces for the capture file to be successfully sent to the server. Ping the server to make sure it's accessible. |
|||||||||||||||||||||
|
tftp-server |
(Optional) Defines the IP address of the TFTP server to which the captured traffic file (.pcap) is sent. If not specified, captured traffic is displayed in the CLI console. After running the command, press Ctrl+C when you want the capture to end and the captured traffic file to be sent to the server. Note: The TFTP server's IP address must be accessible from one of the VoIP network interfaces for the capture file to be successfully sent to the server. Ping the server to make sure it's accessible. |
Command Mode
Privileged User
Examples
Starting a debug capture on network interface VLAN 12, no host filter, and no port filter; the captured traffic is displayed in the CLI console:
# debug capture voip interface vlan 12 proto all host any
Starting a debug capture on network interface VLAN 1 with a protocol filter (IP), no host filter, and a port filter (514); the captured traffic is saved to a temporary file and is sent (when you press Ctrl+C) to the TFTP server at address 171.18.1.21:
# debug capture voip interface vlan 1 proto ip host any port 514 tftp-server 171.18.1.21