Nortel Networks NN46110-602 manual Saving, downloading, and viewing Pcap files

126 Chapter 5 Packet capture

3Click ethereal-setup-n.nn.n.exe.

4Click a download site and save the executable file on your hard drive.

5Double-click the executable file to install Ethereal software in the c:\Program Files\Ethereal directory.

6After you install the software, click the Ethereal application to open the Ethereal window.

Saving, downloading, and viewing PCAP files

To save and download a PCAP file and view it using the VPN Router openpcap utility and Ethereal software:

1On your PC, create a PCAP directory called c:\pcap.

2In the c:\pcap\ directory, copy the openpcap.exe file that is provided with the VPN Router packet capture software.

3On the VPN Router, stop the packet capture object and save the output to a file, for example:

CES#capture ethernet1 stop

CES#capture ethernet1 save ethernet.cap

Saving capture ethernet to file /ide0/ethernet.cap please wait . . 82 frames written successfully.

Note: If you are running PCAP on a VPN Router that has two hard drives, save the PCAP files to directory /ide1.

4On the PC, use FTP software to connect to the VPN Router and copy the ethernet.cap file located in the /ide0/ directory to the c:\pcap directory on the PC.

5Open a DOS window and from the c:\pcap directory, open the PCAP file ethernet.cap by using the openpcap executable. For example, enter this command (syntax is openpcap <input_file> <output_file>):

openpcap ethernet.cap ether1.cap

You are prompted for a password.

NN46110-602