How to stop Pacquet capture from cucm

[O.Zang]

Hello Experts,

Can you please help me ?

I have 2 question after capturing pacquet from CUCM.

I have executed the command utils network capture file mycap count 100000 size all host 10.150.1.1 on the CUCM.

1) My session  timed out Before I typing Ctrl-C.

How can I stop the capture please ?

2) How can i delete existing PCAP capture on the CUCM server ?

Thanks In advance.

Regards,

Zanga

[Gilmar Silva]

Hello,

You may check all capture files with the following command:

file list activelog platform/cli/* detail

To delete the file you may use this:

file delete activelog platform/cli/<your file name>

I am not sure if you will be able to finish it before packet count reaches 100000.

I will test in a lab.

Regards,

Gilmar Silva

[Gilmar Silva]

I started a packet capture in lab and closed the putty session.

It seems the capture is interrupted when the session closes, so I think you will be able to delete the file with no issues.

[Yeikol Espinoza · Accepted solution]

Hello Zanga,

If the session times out the packet capture stops and the file then gets saved on CUCM.

To check the CUCM files use the following command: 

file list activelog platform/cli/* detail

Then to delete the packet capture use:

file delete activelog platform/cli/<name of the capture file>

You can also check and delete the files from the Cisco Unified Real Time Monitoring tool by going to

Tools > Trace & Log Central > Trace & Log Central > Remote Browse > "Trace Files" > Check on "Cisco CallManager" hit next and select "Packet Capture Logs" too. Then "Finish".

Regards,

Yeikol E.

[O.Zang]

Hello experts,

I delete the capture and try to cupture another yesterday.

utils network  capture eth0 file packets count 2000 size all host ip 10.160.7.10

Yesterday i file was blank, I got that output today.  Please What can cause that ?

Regards,

Zanga