Users Guide

The tcpdump command has a finite run process. When you enable the command, it runs until the capture-duration timer
and/or the packet-count counter threshold is met. If you do not set a threshold, the system uses a default of 5 minute capture-
duration and/or a single 1k file as the stopping point for the dump.
You can use the capture-duration timer and the packet-count counter at the same time. The TCP dump stops when the first of
the thresholds are met. That means that even if the duration timer is 9000 seconds, if the maximum file count parameter is met
first, the dumps stop.
• Enable a TCP dump for CPU bound traffic.
CONFIGURATION mode
tcpdump {cp | rp} [capture-duration time | filter expression | max-file-count value | packet-
count value | snap-length value | write-to path]
Accessing Port Extender Core and Mini Core
Dumps
For port extenders (PE), the application core dump and the mini core dump of the port extenders are uploaded to the
controller bridge’s flash inside directory /flash/CORE_DUMP_DIR.
The format of a PE application core uploaded to CB are as follows:
f10pe<PEID#>_<Process Name>_<timestamp>_Stk<slot#>.acore.gz
The format for a mini core dump uploaded to CB are as follows:
f10pe<PEID#>_ StkUnit<slot#>_<timestamp>.kcore.mini.txt
Debugging and Diagnostics 327