09-21-2021 08:38 AM
Keep getting "Unable to deactivate Capture" no matter what syntex I try. For most part I do this:
Create a capture called 'PCAP', and capture packets in both directions on Gi0/0/1 Router# monitor capture PCAP interface GigabitEthernet 0/0/1 both ! Capture any IPv4 packets going to host 8.8.8.8 Router# monitor capture PCAP match ipv4 any 8.8.8.8/32 ! Start the packet capture Router# monitor capture PCAP start
or monitor capture TESTMONCAP buffer size 100 access-list TEST_ACL inteface vlan 10 (or g2, etc.) both
ip access list standard TEST_ACL
permit 10.1.1.1 any
Any help?
09-21-2021 09:10 AM - edited 09-21-2021 09:35 AM
what about the "monitor capture PCAP stop" command?
You can attach an output of the following commands:
show monitor capture PCAP
show monitor capture PCAP buffer brief
Did you try to set the file path as well?
4500TEST#monitor capture MYCAP interface g2/26 both
4500TEST#monitor capture file bootflash:MYCAP.pcap
4500TEST#monitor capture MYCAP match any start
I have attached links for reference:
09-21-2021 09:44 AM - edited 09-21-2021 09:47 AM
no, stopping capture does not work either.
monitor capture file bootflash:MYCAP.pcap (File is not option; must specify name of capture first, I have already deleted everything and reconfigred though)
I am not able to post on here.
09-21-2021 09:32 AM
Hello,
--> unable to deactivate capture
Did you try:
no monitor capture PCAP file
or reboot the switch ?
09-21-2021 09:46 AM
Yes i have tried deleting and reconfiguring.
No can't just reboot right now.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide