Users Guide

Layer 2 Switching Commands 692
Syntax
monitor capture {start [transmit | receive | all] | stop}
• Transmit—Capture packets transmitted by the switch CPU.
• Receive—Capture packets forwarded to the switch CPU.
• All—Capture both transmitted and received packets.
Default Configuration
Capture is not enabled by default.
By default, both transmitted and received packets are captured.
Command Modes
Privileged Exec mode
User Guidelines
In general, starting packet capture erases the previous capture buffer
contents.
Example
console# monitor capture start all
monitor capture mode
Use the monitor capture mode command to select the destination for
captured packets transmitted or received from the CPU. This facility captures
switch control plane traffic and is useful in monitoring network control traffic
and analyzing network security.
Use the no form of the command to return the capture mode to the default.
Syntax
monitor capture mode {line | remote | file}
no monitor capture mode
• line— Captured packets are sent to the console.
• remote— Captured packets are sent to a remote WireShark network
analyzer.