Traffic Capture (pcap) on data plane

Product Discussions System
1

I’m using the filters and capture tools under diagnostics to try and capture data plane traffic but seem unable to.

I can see only “control” traffic in the captures (heartbeats, server checks …).
Is there a way to capture the actual data traffic inside a certain partition?

2

Yes. That’s exactly what the capture tools in ACOS are intended to do.

You must be in the partition where you wish to capture the data first.

You can do one of the following:

Method 1 (this will capture to the screen only):
debug packet l3 ip x.x.x.x (where x.x.x.x is one of either SRC-IP or DST-IP)

debug mon
CTRL-C to break out

OR

Method 2:
You can use axdebug:

axdebug
filter 1

dst ip x.x.x.x
src ip y.y.y.y

exit
capture save FILENAME

Good luck!

3

To control the length and/or timeframe of the axdebug capture or to stop it:

According to my information, by default axdebug takes captures for 5 minutes, maximum 3000 packets with packet length of 1518.
axdebug
  count 0
  timeout 30

would set unlimited packet length, and 30 minutes timeframe. To stop a running capture:
no capture detail

Thanks!
Laszlo