内容目录
  1. 配置抓包规则testpacket capture rule test filter ipv4_sip host 192.168.199.2

  2. 配置抓包文件保存路径:packet capture file flash:test.pcap

  3. 配置抓包点(共4个):

    packet capture point 1 rule test location interface tfGigabitEthernet 0/1 in
    packet capture point 2 rule test location interface tfGigabitEthernet 0/2 in
    packet capture point 3 rule test location interface tfGigabitEthernet 0/3 in
    packet capture point 4 rule test location interface tfGigabitEthernet 0/4 in
  4. 启动/停止抓包:packet capture start/stop

  5. 查看抓包状态:show packet capture status

Capture rules:
  Capture rules test:
    Etype: 0x0800
    Source IP: 192.168.199.2
    Original Source IP: 192.168.199.2
    Original Source ip wild: 0.0.0.0

Capture points:
  Capture point 1:
    Capture rules: test
    Location: TF0/1
    Direction: in
    Packets captured(in): 13
  Capture point 2:
    Capture rules: test
    Location: TF0/2
    Direction: in
    Packets captured(in): 0
  Capture point 3:
    Capture rules: test
    Location: TF0/3
    Direction: in
    Packets captured(in): 0
  Capture point 4:
    Capture rules: test
    Location: TF0/4
    Direction: in
    Packets captured(in): 0

Capture file:
  Filename: flash:test.pcap
  Buffer size: 2(MB)

Capture Statistic:
  Status: stopped
  Stopped reason: Normal
  Start time: 2024-12-6 18:52:44
  End time: 2024-12-6 18:54:4
  Timeout: 10(minutes)
  Packets limit: 1024
  Write file packet count: 13
  1. 开启scp serverip scp server enable

  2. windows主机安装有mobaxterm会安装有scp工具,在命令提示符输入:scp ruijie@x.x.x.x:test.pcap C:\把抓包文件保存到C盘。

最后修改日期: 2024年12月6日

留言

撰写回覆或留言

发布留言必须填写的电子邮件地址不会公开。