Reference Guide

You can use the capture-duration timer and the packet-count counter at the same time. The TCP dump
stops when the first of the thresholds are met. That means that even if the duration timer is 9000
seconds, if the maximum file count parameter is met first, the dumps stop.
Enable a TCP dump for CPU bound traffic.
CONFIGURATION mode
tcpdump cp [capture-duration time | filter expression | max-file-count value
| packet-count value | snap-length value | write-to path]
Z-Series Debugging and Diagnostics
917