AudioCodes Mediant 500L MSBR

User's Manual 57. Syslog and Debug Recordings
Version 6.8 747 Mediant 500L MSBR
57.8 Debug Capturing VoIP and Data-Router Traffic
You can capture VoIP and data-router network traffic by sending traces to the CLI or to a
file that is later sent to a FTP or TFTP server. The traffic can be captured using the
following CLI commands to start the debug capture process:

Data-router related debug capturing:
# debug capture data interface <name> <slot/port> proto
<protocol> host <host> port <port> [ftp-server|tftp-server]
<IP address>
For example:
# debug capture data interface GigabitEthernet 0/0 proto udp
host any port any ftp-server 192.168.0.15

Voice-related debug capturing:
# debug capture voip interface <name> <slot/port> proto
<protocol> host <host> port <port> [ftp-server|tftp-server]
<IP address>
For example:
# debug capture voip interface vlan 1 proto all host any port
any ftp-server 10.4.2.58
57.9 Debug Capturing on Physical VoIP Interfaces
You can capture traffic on the device's physical (Ethernet LAN) VoIP interfaces (Layer-2
VLAN tagged packets). The captured traffic can be saved in a PCAP-format file (suitable
for Wireshark) to a TFTP (default) or an FTP server. The generated PCAP file is in the
Extensible Record Format (ERF). The capture can also be saved to a USB device. The
maximum file size of debug captures that can be saved to the device is 20 MB.
To capture traffic on physical VoIP interfaces, use the following CLI commands:

Starts physical VoIP debug capture:
# debug capture voip physical eth-lan
# debug capture voip physical start

Captures packets continuously in a cyclical buffer (packets always captured until stop
command):
# debug capture VoIP physical cyclic buffer

Retrieves latest capture (PCAP file) saved on a specified server:
# debug capture VoIP physical get_last_capture <TFTP/FTP
server IP address>
The file is saved to the device's memory (not flash) and erased after a device reset.

Marks the captured file (useful for troubleshooting process):
# debug capture VoIP physical insert-pad
Before running this command, the debug capture must be started.

Displays debug status and configured rules:
# debug capture VoIP physical show

Specifies the destination (FTP, TFTP, or USB) where you want the PCAP file sent:
# debug capture VoIP physical target <ftp|tftp|usb>

Stops the debug capture, creates a file named debug-capture-voip-<timestamp>.pcap,
and sends it to the TFTP or FTP server:
# debug capture voip physical stop <TFTP/FTP server IP
address>
If no IP address is defined, the capture is saved on the device for later retrieval.