monitor capture match
Do not use this command when capturing a CAPWAP tunnel. Also, when control plane and CAPWAP
tunnels are mixed, this command will have no effect.
Note
To define an explicit inline core filter for a monitor (Wireshark) capture, use the monitor capture match
command in privileged EXEC mode. To remove this filter, use the no form of this command.
monitor capture {capture-name} match {any | mac mac-match-string | ipv4 {any | host | protocol}{any |
host} | ipv6 {any | host | protocol}{any | host}}
no monitor capture {capture-name} match
Syntax Description
The name of the capture to be assigned a core filter.
capture-name
Specifies all packets.any
Specifies a Layer 2 packet.
mac mac-match-string
Specifies IPv4 packets.ipv4
Specifies the host.host
Specifies the protocol.protocol
Specifies IPv6 packets.ipv6
Command Default
A core filter is not configured.
Command Modes
Privileged EXEC
Command History
ModificationRelease
This command was introduced.Cisco IOS XE 3.3SE
Examples
To define a capture point and the core filter for the capture point that matches to any IP version 4 packets on
the source or destination:
Device# monitor capture mycap interface GigabitEthernet1/0/1 in
Device# monitor capture mycap match ipv4 any any
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
500
monitor capture match
To Next Page
Loading...
Need help?
General
