Packet capture on IOS XE
Specify the interface where you would like to take capture:
monitor capture mycap interface <interface_name> both
What are the interested IPs:
monitor capture mycap match ipv4 host <IP> host <IP>
or you can apply captures for a protocol:
monitor capture mycap match ipv4 protocol ?
tcp
udp
monitor capture mycap match ipv4 protocol tcp any any
Start the capture:
monitor capture mycap start
Stop the capture:
monitor capture mycap stop
Look at the capture: If you do not stop the capture and directly enter this command, it automatically stops the capture.
show monitor cap mycap buffer bri
If you are done taking a look at this capture and would like to clear the capture so that you can capture some new data:
monitor capture mycap clear
