450 Monitoring Switch Traffic
Configuring Remote Capture
This example configures the switch to mirror packets transmitted and
received by the switch CPU to a Wireshark client. This is useful to diagnose
switch behavior and to determine if an attached device is sending properly
formatted packets with correct information to the switch, or just to monitor
traffic sent to the switch CPU. The capture feature can also be configured to
capture to a local file in pcap format or to capture to an in-memory buffer
(text format).
1
Configure capture for Wireshark remote access on port 2002.
console(config)#monitor capture remote
console(config)#exit
2
Start the capture enabling capture of both transmitted and received
packets.
console# monitor capture start all
3
Configure Wireshark for remote capture by selecting
Capture >
Interfaces
from the top tab. (The screens shown in this example are from
Wireshark 1. 10.1.)
4
On the Capture Interfaces dialog, click
Options
.