449
capture creates a file to store packet data when a rotation is triggered. The first rotation occurs when the
capture starts. If you do not set a limit, the number of file rotations is unlimited. This option must be used
with the autostop filesize kilobytes, capture-ring-buffer filesize kilobytes, or capture-ring-buffer duration
seconds option.
capture-ring-buffer filesize kilobytes: Rotates the packet file when the maximum file size is reached. The
kilobytes argument sets the maximum file size. The value range is 1 to 65536 kilobytes.
capture-ring-buffer duration seconds: Rotates the packet file when the rotation interval expires. The
seconds argument sets the rotation interval. The value range is 1 to 2147483647 seconds.
capture-ring-buffer files numbers: Sets the maximum number of packet files for file rotation, in the range
of 2 to 64. If a file rotation occurs after this limit is reached, the capture deletes the oldest file and creates
a new file to store packet data. If you do not set a limit, the number of packet files is unlimited. This option
must be used with the autostop filesize kilobytes, capture-ring-buffer filesize kilobytes, or
capture-ring-buffer duration seconds option.
write filepath: Specifies the full path of the packet file to store captured packet data. The path must be a
case-sensitive string of up to 64 characters. The filename extension must be .pcap. You do not need to
create the file. If file rotation is disabled, the capture creates a packet file with the specified file name. If
file rotation is enabled, the capture automatically creates a packet file for each rotation, and renames the
file to include a sequence number and timestamp. The sequence number increases by 1 for each file
rotation. For example, set the file name to a.pcap. For the first rotation, the capture will create a packet
file named a_00001_20140211034151.pcap. For the second rotation, the capture will create a packet file
named a_00002_20140211034207.pcap. For more information about setting a file path, see file system
management in Fundamentals Configuration Guide.
raw: Displays packet contents in hexadecimal notation. If you do not specify this keyword, the capture
displays packet data in a human-readable format.
verbose: Displays detailed information about captured packets.
brief: Displays brief information about captured packets.
Usage guidelines
The device displays captured packet data in real time.
• If you specify the write filepath parameters without specifying the raw, brief, or verbose keyword,
this command displays the number of captured packets.
• If you do not specify any one of the raw, brief, verbose, and write filepath parameters, this
command displays brief information about captured packets.
To stop the capture while it is capturing packets, press Ctrl+C.
Use Table 93 when you configure the options for stopping the capture or rotating the file.
To Next Page
Loading...
Need help?
General
