tcpdump
Enable a TCP dump for CPU-bound traffic on the Control and Router Processors..
Z9500
Syntax tcpdump {cp | rp} [capture-duration time | filter expression |
max-file-count value | packet-count value | snap-length value |
write-to path]
To disable the TCP dump, use the no tcpdump command.
Parameters cp Enter the keyword cp to perform a dump on traffic
processed by the Control Processor CPU.
rp Enter the keyword rp to perform a dump on traffic
processed by the Route Processor CPU.
capture-
duration
Enter the time for packet capturing. The timer begins as
soon as the command is enabled. The range is 20 to 9000
seconds.
filter Specify the packet that will be dumped. If no filter is entered,
all packets are dumped. Filter expressions usually consist of
an id (name or num ber) preceded by one or more qualifiers.
There are three different kinds of qualifier: type, direction, or
protocol.
Enclose the filter option with double quotes: “port 20.” The
range is 1 to 100 characters.
max-file-count Enter the maximum number of 1MB files. The maximum file
size for a TCP dump capture is 1MB. When a file reaches
1MB, a new file is created, up to the specified number. The
range is 1 to 20.
packet-count Enter the number of packets to capture. The counter begins
as soon as the command is enabled. The range is 10 to
150000.
snap-length Enter the number of bytes per packet to capture. Use this
option to reduce the size of the captured packets, to capture
only the needed headers and avoid rest of the data portion
of the packet. The range is 0 to 1200.
write-to Enter the location to save the captured packets. Files can be
saved to flash, to FTP, SCP, or TFTP:
•flash://filepath
•ftp://userid:password@hostip/filepath
•scp://userid:password@hostip/filepath
•tftp://hostip/filepath
700 Debugging and Diagnostics