Specifications

2-155
Cisco SCE 8000 CLI Command Reference
Chapter 2 CLI Command Reference
flow-capture
flow-capture
Executes flow-capture operations.
flow-capture {start format cap file-name-prefix filename | stop}
Syntax Description
Command Default None
Command Modes Privileged EXEC
Command History This table includes the following release-specific history entries:
Usage Guidelines Flow capturing is a useful debugging capability that captures packets from the traffic stream in real time
and stores them for later analysis using a standard cap format. The classification of the traffic portion to
be captured is based on L4 attributes. The captured information is sent to a specified FTP destination. In
a system with two SCE 8000-SCM modules installed, a separate cap file is created by each SCE
8000-SCM module.
The following flow-capture operations are available:
• start—Starts recording.
• stop—Stops recording.
Note that traffic can be captured only when an application is loaded.
To perform a flow capture, follow these steps:
1. (Optional) Configure limits to the flow-capture operation using the flow-capture controllers
command. Limits prevent a negative impact on traffic processing.
You may skip this step and use the default controller values.
2. Configure an appropriate recording rule using the traffic-rule command. Assign the flow-capture
action to the rule (see traffic-rule).
filename Destination (FTP site path) where the cap file should be created, in the
format: ftp://username:password@ip_address/path/filename. (Do not
include the ".cap" file extension; it is appended automatically.)
In a system with two SCE 8000-SCM modules, which creates two capture
files, an indicator is appended to this prefix to indicate which SCE
8000-SCM module created the file. For example, if you assign the filename
“myCapFile”, the system creates myCapFile1.cap and myCapFile2.cap.
stop Stops recording.
Release Modification
3.5.0 This command was introduced.