Differences between revisions 1 and 2
⇤ ← Revision 1 as of 2015-01-09 05:55:56 →
Size: 581
Editor: PieterSmit
Comment: Create initial notes.
← Revision 2 as of 2015-01-09 05:57:43 → ⇥
Size: 710
Editor: PieterSmit
Comment: Add download.
Deletions are marked like this. Additions are marked like this.
Line 20: Line 20:
 * Download to pc fo analysis with Wireshark
{{{
monitor capture buffer pcap-Br-0109 export tftp://10.10.10.1/pcap-Br-0109
}}}

Cisco Embedded Packet Capture (EPC)

  • ISR Routers can capture packets to a memory buffer, that can then be downloaded for further analysis
  • Setup and start capture. 

monitor capture point start  captp-Br
monitor capture buffer pcap-Br-0109 
!10Meg bugger about 80k packets
monitor capture buffer pcap-Br-0109 size 10240
monitor capture point associate captp-Br pcap-Br-0109

monitor capture point start  captp-Br
  • Monitor progress. 

sh monitor capture buffer pcap-Br-0109 parameters
  • Download to pc fo analysis with Wireshark 

monitor capture buffer pcap-Br-0109 export tftp://10.10.10.1/pcap-Br-0109

...

CategoryCisco

Cisco/RouterPacketCapture (last edited 2015-01-09 05:57:43 by PieterSmit)