Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

Packet capture on IPS 5x

In CLI mode version 5.x, we run "packet capture" command to capture xx packets of an x.x.x.x IP address. Logon to service, searching thought directories but could not find the file that packet

capture created. Please advise file name and directory this command created.

TIA.

Simone

1 REPLY
Gold

Re: Packet capture on IPS 5x

You will find the capture file here:

/usr/cids/idsRoot/var/packet-file

234
Views
0
Helpful
1
Replies
CreatePlease to create content