Cisco Embedded Packet Capture (EPC)
- ISR Routers can capture packets to a memory buffer, that can then be downloaded for further analysis
- Setup and start capture.
monitor capture point start captp-Br monitor capture buffer pcap-Br-0109 !10Meg bugger about 80k packets monitor capture buffer pcap-Br-0109 size 10240 monitor capture point associate captp-Br pcap-Br-0109 monitor capture point start captp-Br
- Monitor progress.
sh monitor capture buffer pcap-Br-0109 parameters
- Download to pc fo analysis with Wireshark
monitor capture buffer pcap-Br-0109 export tftp://10.10.10.1/pcap-Br-0109
...