Exporting PCAP

[SeaLH]

I am trying to run a packet capture on my Cisco WS-C3850-48P, firmware 16.3.b.

I seem to have gotten the actual capture working, but am just running into issues exporting. Here are my commands

monitor capture mypcap access-list CAP-FILTER
monitor capture mypcap limit duration 60
monitor capture mypcap interface gi1/0/1 both
monitor capture mypcap buffer circular size 10
monitor capture mypcap start

wait 60 seconds

monitor capture mypcap export location tftp://10.10.10.200/mypcap.pcap

Everything seems to work fine, the capture starts, and when I run the export command I get "Export Started Successfully" but nothing shows up on my tftp server. I have verified the tftp server works by transferring files to it with a tftp client, and I can ping the tftp server from the switch.

[balaji.bandi]

where is the switch located compare to TFTP server.

For testing make you have PCAP any data, save Locally and upload to TFTP and test it ?

Also can you post below output :

monitor capture mypcap export  ?  (what option you have).

or try :

monitor capture mypcap export tftp://10.10.10.200/mypcap.pcap

Note :may be Limitation of the version of code running.

[SeaLH]

I have tried a TFTP server on the same network as the switch, as well as one at an entirely different location. 

How would I save the pcap locally?

monitor capture mypcap export ?
location Location of the export file
status Check status of export

[balaji.bandi]

monitor capture mypcap export location flash:/yourfile.pcap

can you also post :

monitor capture mypcap export location ?

[marce1000]

 - Check the tftp server's logs , see if you can find any activity related to the receiving of pcap-data.

 M.

[SeaLH]

There is none. I get plenty of informational messages when I was testing with a tftp client, but from the switch nothing.

[SeaLH · Accepted solution]

I got this working by just exporting to flash: then just doing the copy flash: tftp: command, worked fine.

[balaji.bandi]

glad you able to resolve the issue, appreciated your feedback.