file file-name: Saves captured packets to a file.

Indicates the mode in which captured packets are stored: Only the S5720EI, S5720HI, S5730HI, S6720EI, S6720HI, S6720S-EI, and modular switches support this parameter.ĭestination * The value is an integer in the range from 1 to 4094.Ĭaptures packets with a specified inner VLAN ID. ipv6-acl: The value is an integer in the range from 2000 to 3999.For other fixed switches, the value is an integer in the range from 2000 to 4999. ipv4-acl: On the S5720EI, S5720HI, S5730HI, S6720EI, S6720HI, S6720S-EI, and modular switches, the value is an integer in the range from 2000 to 5999.For other fixed switches excluding the S5720EI, S5720HI, S5730HI, S6720EI, S6720HI, and S6720S-EI, the destination IPv6 address cannot be specified in an ACL6 rule. The specified ACL or ACL6 and the corresponding rules must have been created. The interface must exist on the switch and cannot be a management interface.Ĭaptures packets matching a specified ACL or ACL6. interface-numberspecifies the interface number.interface-type specifies the interface type.You may also use Wireshark capture and analysis tool.Interface interface-type interface-numberĬaptures packets on a specified interface.

To capture all packets from a specific host on the network: Tcpdump: verbose output suppressed, use -v or -vv for full protocol decode

To capture all packets on the WAN (the below assumes that interface eth1 is the WAN interface): tcpdump relies on libcap, therefore it can produce standard pcap analysis files which may be processed by other tools. It may be used to capture packets on the fly and/or save them in a file for later analysis. Tcpdump is a network capture and analysis tool.

Remote packet capture tool