How to perform traffic capture by CLI

Zyxel_Kevin
Zyxel_Kevin Posts: 891  Zyxel Employee
Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments
edited November 2023 in Maintenance

1)Login by SSH or Console cable

2)Find the interface name you want to capture.

usgflex200h> show interface vrf main

3)

Peform the command to see output and the filter syntax similar to tcpdump

For example:

usgflex200h> cmd traffic-capture ge3 filter 'icmp'

usgflex200h> cmd traffic-capture ge3 filter 'arp and host 192.168.168.1'

usgflex200h> cmd traffic-capture ge3 filter 'arp or host 192.168.168.1'

Peform the command to save packets as files.

For example:

usgflex200h> cmd traffic-capture new ge3

usgflex200h> cmd traffic-capture list //list pcap file

usgflex200h> cmd traffic-capture export url ftp://[FTP server]/path username [username] password [password] [filename] //fetch pcap file by FTP,TFTP or SCP

usgflex200h> cmd traffic-capture flush //flush all pcap file

usgflex200h> cmd traffic-capture delete //delete the specific pcap file.