Digi TransPort LR54 - Example Filters for Capturing Data Traffic

Diagnostics and troubleshooting Analyze traffic
Digi TransPort WR Routers User Guide
268
To capture data on the eth1 and cellular1 interfaces:
digi.router> analyzer state on
digi.router> analyzer interfaces eth1,cellular1
digi.router>
Example filters for capturing data traffic
To filter captured data, use the analyzer command filter parameter. For example:
digi.router> analyzer filter ip host 192.168.1.1
For more information on filtering, see http://www.tcpdump.org/manpages/pcap-filter.7.html.
The following are examples of filters on data traffic capturing for several types of network data.
Example IPv4 capture filters
Capture traffic to and from IP host 192.168.1.1:
digi.router> analyzer filter ip host 192.168.1.1
Capture traffic from IP host 192.168.1.1:
digi.router> analyzer filter ip src host 192.168.1.1
Capture traffic to IP host 192.168.1.1:
digi.router> analyzer filter ip dst host 192.168.1.1
Capture traffic for a particular IP protocol:
digi.router> analyzer filter ip proto <protocol>
Replace <protocol> with a number in the range of 1 to 255 or one of the following keywords: \icmp,
icmp6, igmp, pim, ah, esp, vrrp, \udp, or \tcp.
Note When you specify \icmp, \tcp, or \udp as a protocol, you must precede the name with the
backslash character.
Capture traffic to and from a TCP port 80:
digi.router> analyzer filter ip proto \tcp and port 80
Capture traffic to UDP port 53:
digi.router> analyzer filter ip proto \udp and dst port 53
Capture traffic from UDP port 53:
digi.router> analyzer filter ip proto \udp and src port 53