cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2985
Views
5
Helpful
4
Replies

Unable to activate Capture on Cat4k

CiscoBrownBelt
Level 6
Level 6

Keep getting "Unable to deactivate Capture" no matter what syntex I try. For most part I do this:

 

 Create a capture called 'PCAP', and capture packets in both directions on Gi0/0/1
Router# monitor capture PCAP interface GigabitEthernet 0/0/1 both

! Capture any IPv4 packets going to host 8.8.8.8
Router# monitor capture PCAP match ipv4 any 8.8.8.8/32

! Start the packet capture
Router# monitor capture PCAP start

or monitor capture TESTMONCAP buffer size 100 access-list TEST_ACL inteface vlan 10 (or g2, etc.) both
ip access list standard TEST_ACL
permit 10.1.1.1 any

 Any help?

4 Replies 4

pman
Spotlight
Spotlight

what about the "monitor capture PCAP stop" command?

 

You can attach an output of the following commands:

show monitor capture PCAP

show monitor capture PCAP buffer brief

 

 

Did you try to set the file path as well?

4500TEST#monitor capture MYCAP interface g2/26 both
4500TEST#monitor capture file bootflash:MYCAP.pcap
4500TEST#monitor capture MYCAP match any start

 

 

I have attached links for reference:

https://www.cisco.com/c/en/us/support/docs/switches/catalyst-4500-series-switches/116470-configure-product-00.html

 

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/XE3-9-0E/15-25E/configuration/guide/xe-390-configuration/wireshrk.html

 

 

no, stopping capture does not work either.

monitor capture file bootflash:MYCAP.pcap (File is not option; must specify name of capture first, I have already deleted everything and  reconfigred though)

I am not able to post on here. 

Hello,

 

--> unable to deactivate capture

 

Did you try:

 

no monitor capture PCAP file

 

or reboot the switch ?

Yes i have tried deleting and reconfiguring.

No can't just reboot right now.