Nortel Networks NN46110-602 manual Tunnel capture object using a remote IP address

124 Chapter 5 Packet capture

After Telnet traffic activates the stop trigger, the show capture command resembles the following example. The Capture state field now shows that the capture was stopped by the stop trigger.

CES#show capture test-trigger
Capture state:	STOPPED by stop
trigger
Capture buffer size:	1048576
Capture type:	ETHERNET
Capturing on interface:	FastEthernet 0/1
Promiscuous mode is:	DISABLED
Capturing MAX octets per frame:	4096
Captured frames:	188
Capture buffer utilization:	1%
Capturing direction:	BIDIRECTIONAL
Capture buffer wrapping:	DISABLED
Capture buffer wrapped:	FALSE
Start trigger applied:	permit FTP
Start trigger discards:	362
Stop trigger applied:	permit Telnet
CES#

To stop the capture object and save the buffer contents to a file called test4.cap, enter the following commands:

CES#capture test-trigger stop

CES#capture test-trigger save test4.cap

Saving capture test-trigger to file /ide0/test4.cap please wait . .

.

220 frames written successfully CES#

Tunnel capture object using a remote IP address

In the following example, you configure a capture object called test-remote-IPthat captures traffic arriving over a tunnel with the specified remote IP address.

To create and use this capture object, you run commands like the ones illustrated in this example. These commands do the following:

1Create a capture object called test-remote-ip.

2Enter Capture Configuration mode for the capture object.

3Set the remote IP address to 192.168.100.1.

NN46110-602