To Next Page

To Previous Page

233

Configuring the packet capture

Overview

The packet capture feature captures incoming packets that are to be forwarded in CPU. The feature

displays the captured packets in real time, and allows you to save the captured packets to a .pcap file

for future analysis.

The packet capture supports capture filters and display filters. You can use expressions to match

packets to capture or display.

Filter elements

A capture or display filter contains a keyword string or multiple keyword strings that are connected by

operators.

Keywords include the following types:

• Qualifiers—Fixed keyword strings. For example, you must use the ip qualifier to specify the

IPv4 protocol.

• Variables—Values supplied by users in the required format. For example, you can set an IP

address to 2.2.2.2 or any other valid values.

A variable must be modified by one or multiple qualifiers. For example, to capture any packets sent

from the host at 2.2.2.2, use the filter src host 2.2.2.2.

Operators include the following types:

• Logical operators—Perform logical operations, such as the AND operation.

• Arithmetic operators—Perform arithmetic operations, such as the ADD operation.

• Relational operators—Indicate the relation between keyword strings. For example, the =

operator indicates equality.

This document provides basic information about these elements. For more information about

capture and display filters, go to the following websites:

• http://wiki.wireshark.org/CaptureFilters.

• http://wiki.wireshark.org/DisplayFilters.

Capture filter keywords

Table 27 and Table 28 describe the qualifiers and variables for capture filters, respectively.

Table 27 Qualifiers for capture filters

HPE FlexNetwork 5510 HI Series Network Management And Monitoring Configuration Guide

Other manuals for HPE FlexNetwork 5510 HI Series