Administrator Guide

Layer 2 Switching Commands 663
monitor capture (Privileged Exec)
Use the monitor capture command to capture packets transmitted or
received from the CPU. This facility captures switch control plane traffic and
is useful in monitoring network control traffic and analyzing network security.
Remote packet capture is not supported when the packets are received via
Service Port.
Syntax
monitor capture {start [transmit | receive | all] | stop}
•Transmit—Capture packets transmitted by the switch CPU.
• Receive—Capture packets forwarded to the switch CPU.
• All—Capture both transmitted and received packets.
Default Configuration
Capture is not enabled by default.
By default, both transmitted and received packets are captured.
Command Modes
Privileged Exec mode
User Guidelines
In general, starting packet capture erases the previous capture buffer
contents.
Example
console# monitor capture start all
monitor capture mode
Use the monitor capture mode command to select the destination for
captured packets transmitted or received from the CPU. This facility captures
switch control plane traffic and is useful in monitoring network control traffic
and analyzing network security.
Use the no form of the command to return the capture mode to the default.
2CSNXXX_SWUM204.book Page 663 Monday, January 25, 2016 1:25 PM