How to perform traffic capture by CLI

Options
Zyxel_Kevin
Zyxel_Kevin Posts: 796  Zyxel Employee
First Anniversary 10 Comments Friend Collector First Answer
edited November 2023 in Maintenance

1)Login by SSH or Console cable

2)Find the interface name you want to capture.

usgflex200h> show interface vrf main

3)

Peform the command to see output and the filter syntax similar to tcpdump

For example:

usgflex200h> cmd traffic-capture ge3 filter 'icmp'

usgflex200h> cmd traffic-capture ge3 filter 'arp and host 192.168.168.1'

usgflex200h> cmd traffic-capture ge3 filter 'arp or host 192.168.168.1'

Peform the command to save packets as files.

For example:

usgflex200h> cmd traffic-capture new ge3

usgflex200h> cmd traffic-capture list //list pcap file

usgflex200h> cmd traffic-capture export url ftp://[FTP server]/path username [username] password [password] [filename] //fetch pcap file by FTP,TFTP or SCP

usgflex200h> cmd traffic-capture flush //flush all pcap file

usgflex200h> cmd traffic-capture delete //delete the specific pcap file.