Can't find what you need?


• Ask the Community
• Create a Case
Reset Search
 

 

Article

How to Perform a Packet Capture on Summit WM3000 and RFS Series Controllers

« Go Back

Information

 
TitleHow to Perform a Packet Capture on Summit WM3000 and RFS Series Controllers
Objective
Explain the procedure for performing a packet captures on a Summit WM3000 and RFS Series Controllers.
Environment
  • Summit WM3000 Series Controller
  • RFS Controllers
  • WiNG 5.X
Procedure
The service pktcap command is used to perform a local packet capture on WM3000 Series controllers and supported Access Points.  The command format is as follows:
service pktcap on interface <INTERFACE> <OPTIONS> filter <FILTERS>
Listed below are some examples of different packet capture scenarios.

Interface packet capture with packet count:
L3L_K2_U41_WM1#service pktcap on interface up1 count 10
Capturing up to 10 packets. Use Ctrl-C to abort.
1 14:56:32.544555 I ARP: Who has 10.1.0.1? tell 10.1.0.11
2 14:56:33.038772 I  00-04-96-98-39-94 > 01-80-C2-00-00-0E protocol 0x88f7 length 68
3 14:56:33.317288 I  00-04-96-98-39-94 > 01-80-C2-00-00-21 protocol 0x88f5 length 60
4 14:56:33.337076 I IGMP: 10.1.0.68 > 224.0.0.22, DF, IPv4 length 32, DSCP 48
5 14:56:33.576826 I IGMP: 10.1.0.4 > 224.0.0.2, DF, IPv4 length 32, DSCP 48
6 14:56:33.887131 O UDP: 10.1.0.2 > 10.1.0.3 ports 24576 > 24576, data length 118, DSCP 40| DGRAM 46.42.21.4E/0 > 00.00.00.00/12 router CSNP from 46.42.21.4E
7 14:56:34.039029 I  00-04-96-98-39-94 > 01-80-C2-00-00-0E protocol 0x88f7 length 68
8 14:56:34.083216 O MINT  00-04-96-42-21-4E > 01-A0-F8-00-00-00 | DGRAM 46.42.21.4E/0 > 00.00.00.00/50 extvlan EXTV from 46.42.21.4E
9 14:56:34.206860 I IGMP: 10.1.0.4 > 224.0.0.22, DF, IPv4 length 32, DSCP 48
10 14:56:34.317627 I  00-04-96-98-39-94 > 01-80-C2-00-00-21 protocol 0x88f5 length 60
Interface packet capture written to local file:
L3L_K2_U41_WM1#service pktcap on interface up1 write flash:/example.pcap
Capturing up to 50 packets. Use Ctrl-C to abort.
50
Interface packet capture (count of 10) filtering on a specific ethernet MAC address (bi-directional):
L3L_K2_U41_WM1#service pktcap on interface up1 count 10 filter ether host 00-04-96-98-39-94
Capturing up to 10 packets. Use Ctrl-C to abort.
1 15:02:14.150194 I  00-04-96-98-39-94 > 01-80-C2-00-00-21 protocol 0x88f5 length 60
2 15:02:14.186435 I  00-04-96-98-39-94 > 01-80-C2-00-00-0E protocol 0x88f7 length 68
3 15:02:15.149190 I  00-04-96-98-39-94 > 01-80-C2-00-00-21 protocol 0x88f5 length 60
4 15:02:15.186789 I  00-04-96-98-39-94 > 01-80-C2-00-00-0E protocol 0x88f7 length 68
5 15:02:16.148660 I  00-04-96-98-39-94 > 01-80-C2-00-00-21 protocol 0x88f5 length 60
6 15:02:16.187155 I  00-04-96-98-39-94 > 01-80-C2-00-00-0E protocol 0x88f7 length 68
7 15:02:16.449903 I 802.1AB LLDP  00-04-96-98-39-94 > 01-80-C2-00-00-0E 
8 15:02:17.148386 I  00-04-96-98-39-94 > 01-80-C2-00-00-21 protocol 0x88f5 length 60
9 15:02:17.187399 I  00-04-96-98-39-94 > 01-80-C2-00-00-0E protocol 0x88f7 length 68
10 15:02:18.147889 I  00-04-96-98-39-94 > 01-80-C2-00-00-21 protocol 0x88f5 length 60
Interface packet capture (count of 10), written to file, filtering on a specific IP address (bi-directional):
L3L_K2_U41_WM1#service pktcap on interface up1 write flash://example.pcap count 10 filter host 10.1.0.2
Capturing up to 10 packets. Use Ctrl-C to abort.
10
The saved capture files can be copied off the device using the copy command.  Copy options include USB, TFTP, FTP, SFTP, and HTTP.  Example below:
L3L_K2_U41_WM1#copy ?
  FILE  File to which to copy
        Files: flash:/path/file
               usb1:/path/file
               nvram:startup-config
               running-config (merges with current configuration)
  URL   URL to which to copy
        URLs:  tftp://<hostname|IP>[:port]/path/file
               ftp://<user>:<passwd>@<hostname|IP>[:port]/path/file
               sftp://<user>:<passwd>@<hostname|IP>[:port]>/path/file
        

L3L_K2_U41_WM1#copy flash:/example.pcap tftp://<SERVER_IP>/<REMOTE_FILE>




 
Additional notes

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255