Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
In the command help of the PIX Firewall 500 Series with software version 7.x, the pcap option in the PIX capture command is documented incorrectly
This issue is due to the presence of Cisco bug ID CSCeh89701.
Note: The syntax noted in this documentation is for 6.x and earlier codes. The syntax for this option has been changed in 7.x code to copy [/pcap] capture: capture_name tftp://server/path.
Issue the copy capture: capture_name tftp://server/path [pcap] command in order to copy capture information to a remote TFTP server.
Issue the https://securityappliance-ip-address/capture/capture_name[/pcap] command in order to see the packet capture information with a web browser.
If the pcap optional keyword is specified, a libpcap-format file is downloaded to the web browser and can be saved with the web browser.
Note: A libcap file can be viewed with TCPDUMP or Ethereal.
As a workaround, use the ? option after copy is entered in order to determine the options and syntax. This is an example:
/noconfirm Do not prompt for confirmation /pcap Raw packet capture dump capture: Copyout capture buffer flash: Copy from flash: file system ftp: Copy from ftp: file system http: Copy from http: file system https: Copy from https: file system running-config Copy from current system configuration startup-config Copy from startup configuration system: Copy from system: file system tftp: Copy from tftp: file system pixfirewall# copy /pcap capture:?
capture: pixfirewall# copy /pcap capture: ?
WORD Capture buffer name prepended by optional context-name and '/'