cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2087
Views
0
Helpful
3
Replies

IOS Packet Capture help needed

cisco24x7
Level 6
Level 6

According to Cisco documentation:

Finally there is a feature that was missing from IOS in the past. This is the ability to easily capture packets travelling through the router, and export the captured data to PCAP format so that you can view it with third party tools (like Wireshark). The packets can also be viewed locally on the router. The configuration example below shows how to enable packet capture (supported in IOS version 12.4(20)T):

Cisco-Router# monitor capture buffer mycapturedata size 128 max-size 128 circular

Cisco-Router# monitor capture point ip cef capturepoint1fastEthernet 1/1 both

Cisco-Router# monitor cap point associate capturepoint1 mycapturedata

However, I am running IOS 12.4(24)T1 but I can not enable it:

R2851-3#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R2851-3(config)#monitor ?

event-trace Tracing of system events

session Configure a SPAN session

R2851-3(config)#monitor

IOS version is c2800nm-adventerprisek9-mz.124-24.T1.bin

Anyone know why? Thanks.

1 Accepted Solution

Accepted Solutions

Jon Marshall
Hall of Fame
Hall of Fame

David

You are trying to run the "monitor" commands from config mode but you run them from privilged exec mode ie.

R2851-3#monitor capture ?

Jon

View solution in original post

3 Replies 3

Jon Marshall
Hall of Fame
Hall of Fame

David

You are trying to run the "monitor" commands from config mode but you run them from privilged exec mode ie.

R2851-3#monitor capture ?

Jon

Thank you. Not sure where my head is today :-(

paolo bevilacqua
Hall of Fame
Hall of Fame

edited :)

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Innovations in Cisco Full Stack Observability - A new webinar from Cisco