Taking a packet capture from Director

book

Article ID: 168526

calendar_today

Updated On:

Products

Director

Issue/Introduction

You can obtain a packet capture from Director for troubleshooting purposes using the following method.

Login to director via SSH and go into Enable Mode:

director# config t
director (config) # tcpdump filter -s0      (NOTE:  This sets the number of bytes to capture per packet; -s0 captures a full packet)

director (config) # tcpdump start
director #
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
director (config) # tcpdump stop
ok
231 packets captured
231 packets received by filter
0 packets dropped by kernel


You can upload the packet capture to a server for viewing purposes using the following command:

director # tcpdump upload ftp://<server>/<filename.pcap> username <username> password <password> 
director #


Packet captures taken from director can be viewed by Wireshark (http://www.wireshark.org).

Resolution

You can obtain a packet capture from Director for troubleshooting purposes using the following method.

Login to director via SSH and go into Enable Mode:

director# config t
director (config) # tcpdump filter -s0      (NOTE:  This sets the number of bytes to capture per packet; -s0 captures a full packet)

director (config) # tcpdump start
director #
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
director (config) # tcpdump stop
ok
231 packets captured
231 packets received by filter
0 packets dropped by kernel


You can upload the packet capture to a server for viewing purposes using the following command:

director # tcpdump upload ftp://<server>/<filename.pcap> username <username> password <password> 
director #


Packet captures taken from director can be viewed by Wireshark (http://www.wireshark.org).