How do I generate a pcap to validate incoming data to an MTP?

Products

• CA Application Delivery Analysis MTP (NetQoS / ADA)
• CA Application Delivery Analysis (NetQoS / ADA)

Issue/Introduction

How do I generate a pcap to validate incoming data to an MTP or VMTP?

Environment

MTP and VMTP all versions

Resolution

1. Open an ssh session to MTP.

2. Use the command below to see the usage for the buildpcap command.

           /opt/NetQoS/bin/buildpcap --help    

3. The required options are:

            --feed , meaning the port receiving the data

            --output-file  which is the file its writing the data to

            -start-datetime 

            --end-datetime 

4. You can use the example command below to generate a pcap that will filter to a specific server IP address.

Make sure to change the start-datatime and end-datetime to a recent short time period as the files will be very large.

Use the server IP you wish to filter on in the --filter-server-address option.

You can optionally use the -filter-server-port to filter by specific ports.

            /opt/NetQoS/bin/buildpcap --feed 0 --start-datetime 20190816-10:00:00 --end-datetime 20190816-11:00:00 --filter-server-address x.x.x.x --filter-server-port 80 --output-file /tmp/buildpcap.pcap

5. This will create a file in the tmp directory that you can review or send to Support for troubleshooting missing data in MTP.