Create Case

Perform a packet capture in the EXOS CLI using the command "debug packet capture"

  • Article Type:
  • How To
  • Article Number:
  • 000012273
  • Last Modified:
  • 9/11/2017

Objective

Perform a packet capture in the EXOS CLI using the command "debug packet capture"

Environment

  • EXOS 15.4 or later

Procedure

Be Aware!
Debug commands are primarily meant for troubleshooting purposes and are NOT part of any EXOS validation tests (regression).

The usage of any debug command can result in unexpected side-effects (like memory depletion, high CPU, process failures).
 
The command "debug packet capture" is available in EXOS 15.4 and later to capture packets to/from the CPU in the CLI.
* It doesn't require to enable the debug mode. However, it is the hidden debug command that needs to be manually typed in the CLI as shown below.

 
# debug packet capture {ports <port_list>} {on|off} {file-name <file_name>} {count <number of packets>}

Use the following command to start capturing all packets to/from the CPU.
# debug packet capture on

Use the following command to stop the packet capture.
# debug packet capture off

Use the following command to capture 100 packets and automatically stop the packet capture (after 100 packets are captured).
# debug packet capture on count 100

Use the following command to capture 100 packets from the ports 1:1-1:2.
# debug packet capture ports 1:1-2 on count 100

Use the following command to capture 100 packets from the ports 1:1 and 1:2, and save the capture in the "pktcapt001.pcap" file. 
# debug packet capture ports 1:1-2 on file-name pktcapt001 count 100

The packet capture files are saved to internal memory. Use "ls /usr/local/tmp" or "ls internal-memory" to view the capture files:

 
# ls /usr/local/tmp
-rwxr-xr-x    1 root     0             352 Aug 20 22:16 2014-08-20_22-16-20_rx_tx.pcap
-rwxr-xr-x    1 root     0              67 Aug 20 22:17 2014-08-20_22-17-41_rx_tx.pcap
-rwxr-xr-x    1 root     0               5 Aug 20 22:25 2014-08-20_22-25-30_rx_tx.pcap
* Filenames will be auto-named if no filename is given. The capture files can be sent to a TFTP server for analysis.

 

Additional notes

Feedback