Filter
Top Products
128 Chapter 5 Packet capture
NN46110-602
T1 frame relay capture:
editcap -F ngsniffer d:\pcap\fr.cap frelay.syc
5 From Sniffer Pro, open the .enc file or the .syc file to view the trace.
For a global IP trace or tunnel trace, you must perform an extra step on
Sniffer Pro because only Layer 3 traffic is recorded in the PCAP capture.
6 Before opening a global IP or tunnel trace, set the Protocol Forcing option in
Sniffer Pro to view the correct Layer 3 information.
a Click Tools > Options > Protocol Forcing.
b Click Rule 1 and specify if <Frame Start>, Skip 0 bytes, then Internet
Protocol.
c Click OK and then open the file.
Deleting capture objects and disabling packet capture
When you no longer need a capture object, delete it to free up memory. You can
also disable packet capture globally to remove all configured capture objects and
free the memory used to store them.
Any capture data that you saved in a file using the
capture save command
remains stored on the disk until you explicitly delete the file.
Note: If you disable packet capture globally, you must use the serial port
to re-enable it again (see “Enabling packet capture on a VPN Router” on
page 111).