10-31-2017 12:52 AM - edited 03-08-2019 12:34 PM
Has anyone tried this on a isr4451 router?
According to cisco documentation , the buffer size need not be configured. What are the complications that the capture might not have been stopped and router run out of memory?
Another question I have is , do we really need to associate a filter? If I want to capture all traffic in the interface , I am assuming I can start the capture right away.
Solved! Go to Solution.
10-31-2017 06:13 AM
Hi
If i remember correctly, the default buffer size is 10 mb. More over, when configuring EPC, the filter should be applied on the duration to capture the packets or number of packets rather than just relying on the buffer to get completed.
Yes, filter option is recommended. Though it is not recommended, you can set permit ip any any in the ACL that is applied as the filter.
Hope this answers your question.
10-31-2017 06:13 AM
Hi
If i remember correctly, the default buffer size is 10 mb. More over, when configuring EPC, the filter should be applied on the duration to capture the packets or number of packets rather than just relying on the buffer to get completed.
Yes, filter option is recommended. Though it is not recommended, you can set permit ip any any in the ACL that is applied as the filter.
Hope this answers your question.
10-31-2017 05:15 PM
10-31-2017 07:13 PM
ANother question I have is, it seems there were some packets not captured when using EPC, I have another capture on the other end of the line (using the traditional SPAN-PC Wireshark, and dont have this issues) Do i need to adjust something or? I have adjusted my buffers and is still the same.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide