This is regarding the new EPC feature available in Cisco routers for packet capture.
What is the maximum size of the buffer we can configure for packet capture. ?
Will the entire packets be stored or just the headers will be stored. Also if the interfcae is 100MB, normally if I use an external ethreal the packet capture will have around 300 MB.But in this case with router storing the packet in buffer, only very few packet details I can get.
AS the buffer will be occupying the memory of the router, will it have an impact on the router perfomance ?
Please confirm whether my below understanding is right.
1)if I am using linear buffer, once the buffer is full, it will discard the packets .
2)If I am using circular buffer, the packets will be added in a circular manner, overwriting existing packets and hence the buffer will contain the latest packets.
Please let me know to what extend this packet capture feature in router is useful.
Please also provide a url containing complete details of this new feature.
Thanks & Regards,