cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1147
Views
15
Helpful
4
Replies

How to stop Pacquet capture from cucm

O.Zang
Level 1
Level 1

Hello Experts,

 

Can you please help me ?

 

I have 2 question after capturing pacquet from CUCM.

I have executed the command utils network capture file mycap count 100000 size all host 10.150.1.1 on the CUCM.

1) My session  timed out Before I typing Ctrl-C.

How can I stop the capture please ?

2) How can i delete existing PCAP capture on the CUCM server ?

 

Thanks In advance.

 

Regards,

Zanga

1 Accepted Solution

Accepted Solutions

Yeikol Espinoza
Cisco Employee
Cisco Employee

Hello Zanga,

 

If the session times out the packet capture stops and the file then gets saved on CUCM.

 

To check the CUCM files use the following command: 

file list activelog platform/cli/* detail

 

Then to delete the packet capture use:

file delete activelog platform/cli/<name of the capture file>

 

You can also check and delete the files from the Cisco Unified Real Time Monitoring tool by going to

Tools > Trace & Log Central > Trace & Log Central > Remote Browse > "Trace Files" > Check on "Cisco CallManager" hit next and select "Packet Capture Logs" too. Then "Finish".

 

Regards,

Yeikol E.

 

 

View solution in original post

4 Replies 4

Gilmar Silva
Level 1
Level 1

Hello,

 

You may check all capture files with the following command:

 

file list activelog platform/cli/* detail

 

To delete the file you may use this:

 

file delete activelog platform/cli/<your file name>

 

I am not sure if you will be able to finish it before packet count reaches 100000.

 

I will test in a lab.

 

Regards,

 

Gilmar Silva

I started a packet capture in lab and closed the putty session.

 

It seems the capture is interrupted when the session closes, so I think you will be able to delete the file with no issues.

Yeikol Espinoza
Cisco Employee
Cisco Employee

Hello Zanga,

 

If the session times out the packet capture stops and the file then gets saved on CUCM.

 

To check the CUCM files use the following command: 

file list activelog platform/cli/* detail

 

Then to delete the packet capture use:

file delete activelog platform/cli/<name of the capture file>

 

You can also check and delete the files from the Cisco Unified Real Time Monitoring tool by going to

Tools > Trace & Log Central > Trace & Log Central > Remote Browse > "Trace Files" > Check on "Cisco CallManager" hit next and select "Packet Capture Logs" too. Then "Finish".

 

Regards,

Yeikol E.

 

 

Hello experts,

 

I delete the capture and try to cupture another yesterday.

utils network  capture eth0 file packets count 2000 size all host ip 10.160.7.10

Yesterday i file was blank, I got that output today.  Please What can cause that ?

 

Regards,

Zanga