×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

IP Traffic Export - Packet Capture

Document

Sun, 01/11/2015 - 09:03
Sep 30th, 2013
User Badges:
  • Gold, 750 points or more



Introduction


IP Traffic Export allows you to configure your router to export IP packets received on multiple, simultaneous WAN or LAN interfaces. This document covers the procedure for configuring IP Traffic export and the Packet Capture for troubleshooting and monitoring the devices.


Configuration: IP Traffic Capture


Below is the sample configuration created and IP Traffic captured on Cisco Unified Border Element (CUBE) ISR-G2, IOS 15.1.2T release for troubleshooting and monitoring the SIP Calls routed through the CUBE.


1. Configure capture profile


!

create profile
ip traffic-export profile corp1 mode capture
bidirectional
incoming access-list 123
outgoing access-list 123
!
! access-list to filter only SIP messages (port 5060)
access-list 123 permit udp any any eq 5060
access-list 123 permit tcp any any eq 5060
!
! apply to an interface, default memory is 5M
interface fa0/0
ip traffic-export apply TAC [size <bytes>]



2. Capture traffic with these exec (enable) level commands


Note: The exec cmds don’t appear until a profile has been configured


router#traffic-export interface fa0/0 clear
router#traffic-export interface fa0/0 start
<capture the problem>
router#traffic-export interface fa0/0 stop




3. Export the pcap file to a server


router#traffic-export interface fa0/0 copy ftp://x.x.x.x/capture.pcap


Now you can see the protocol SIP call flow using Wireshark.



Loading.

Actions

This Document

Related Content