IOS Embedded Packet Capture

• Create a buffer

– monitor capture buffer bufzzz size 512 max-size 512 circular

• Define which interface and direction to capture

– monitor capture point ip cef sniffile gig 0/0 in

• Associate the buffer with the capture

– monitor capture point associate sniffile bufzzz

• Start/Stop the capture

– monitor capture point start sniffile

– monitor capture point stop sniffile

• Export the capture to a .pcap file

– monitor capture buffer bufzzz export tftp://1.1.1.1/bufzzz.pcap

biOos