01-12-2025 11:30 AM
I have found that doing packet captures in the web interface is much easier.
However there seems to be very little documentation on it.
does anyone have a link to some details on this?
Solved! Go to Solution.
01-13-2025 03:22 PM
thanks for the input. Turns out the webui is just running the following command in the background:
Monitor capture CAP interface gig 1/0/1 in
Monitor capture CAP match any
monitor capture CAP start
monitor capture CAP stop
monitor capture CAP export location flash:CAP.pcap
Then use file manager in the webui to download it.
01-12-2025 12:09 PM
For which device or platform? Usually Gui is not good for troubleshooting
01-12-2025 12:20 PM
9200 series switches. Normally I’d agree but grabbing packet captures off the switch on specific interfaces is extremely easy. I like it. However I’m failing to find any documentation on the process.
for instance if you span a gig port that’s saturated to a laptop you’re potentially setting up for failure with the potential 2 gigs you’re sending down that link, which of course means drops.
Well, is the webui doing some sort of span behind the scenes? Or Is there some sort of guarantee it’s dumping out to the pcap every packet that’s either ingress or egress? How reliable is the pcap it creates?
Sort of went down a rabbit hole looking for this type of info. And realized there’s surprisingly little information out there.
01-12-2025 12:59 PM - edited 01-12-2025 01:00 PM
Not documented for sure, probably intentionally . But I have no doubt It is reliable.
If one would dig on It, I believe It should be at http level. Surely there is an API on the browser interacting with the switch via programmability, maybe using netconf?
I believe you can check the underline actions on the switch with inspection on the switch GUI page.
https://zapier.com/blog/inspect-element-tutorial/
01-12-2025 01:06 PM
Good thought. I’ll have a look this week and see if it sheds any light.
01-12-2025 01:44 PM
I send you PM check it
MHM
01-13-2025 03:22 PM
thanks for the input. Turns out the webui is just running the following command in the background:
Monitor capture CAP interface gig 1/0/1 in
Monitor capture CAP match any
monitor capture CAP start
monitor capture CAP stop
monitor capture CAP export location flash:CAP.pcap
Then use file manager in the webui to download it.
01-13-2025 07:59 PM - edited 01-13-2025 08:04 PM
You are so so welcome
MHM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide