User Manual

Table Of Contents
NETGEAR M4500 Series Switches CLI Command Reference Manual 479
5.16.17.4. capture {file | remote | line}
Use this command to configure packet capture options. This command is persistent across a reboot cycle.
Format capture {file | remote | line}
Default Remote
Mode Global Config
5.16.17.5. capture remote port
Use this command to configure file capture options. This command is persistent across a reboot cycle.
Format capture remote [port <port-id>]
Default 2002
Mode Global Config
Parameter
Definition
file
In the capture file mode, the captured packets are stored in a file. The
maximum file size defaults to 512KB. The switch can transfer the file to a TFTP
server via TFTP, FTP via CLI. The file is formatted in pcap format, is name cpu-
pkt-capture.pcap, and can be examined using network analyzer tools such as
Wireshark or Ethereal. Starting a file capture automatically terminates any
remote capture sessions and line captureing. After the packet capture is
activated, the capture proceeds until the capture file reaches its maximum size,
or until the capture is stopped manually using CLI command capture stop.
Remote
In the remote capture mode, the captured packets are redirected in real time to
an external PC running the wireshark tool for Microsoft Windows. A packet
capture server runs on the switch side and sends the captured packets via a TCP
connection to the Wireshark tool. The remote capture can be enabled or disable
using the CLI. There should be a Windows PC with the Wireshark tool to display
the captured file. When using the remote capture mode, the switch does not
sotre any captured data locally on its file system.
line
In the capture line mode, the captured packets are saved into the RAM and can
be displayed on the CLI. Starting a line capture automatically terminates any
remote capture session and capturing into a file. There is a maximum 128
packets of maximum 128 btes that can be captured and displayed in Line mode.
Parameter
Definition
<port-id>
Configure the listening TCP port. The range of port ID is 1024 to 49151.