Nortel Networks NN46110-602 manual Deleting capture objects and disabling packet capture

128 Chapter 5 Packet capture

T1 frame relay capture:

editcap -F ngsniffer d:\pcap\fr.cap frelay.syc

5From Sniffer Pro, open the .enc file or the .syc file to view the trace.

For a global IP trace or tunnel trace, you must perform an extra step on Sniffer Pro because only Layer 3 traffic is recorded in the PCAP capture.

6Before opening a global IP or tunnel trace, set the Protocol Forcing option in Sniffer Pro to view the correct Layer 3 information.

a Click Tools > Options > Protocol Forcing.

b Click Rule 1 and specify if <Frame Start>, Skip 0 bytes, then Internet Protocol.

c Click OK and then open the file.

Deleting capture objects and disabling packet capture

When you no longer need a capture object, delete it to free up memory. You can also disable packet capture globally to remove all configured capture objects and free the memory used to store them.

Note: If you disable packet capture globally, you must use the serial port to re-enable it again (see “Enabling packet capture on a VPN Router” on page 111).

Any capture data that you saved in a file using the capture save command remains stored on the disk until you explicitly delete the file.

NN46110-602