Configure Packet Capture on the Extreme 9920

The packet capture (PCAP) feature captures live packet data from the traffic that enters and leaves a device and renders the data in a human-readable format.

About this task

You can enable PCAP on any physical port on the 9920 device. You can use the data in PCAP files to monitor and analyze network traffic for such information as bandwidth usage, DNS resolution, and even network intrusion.

Ingress packets are captured before any processing occurs, such as actions that are defined by the policies you created. Egress packets are captured after all processing occurs, including header alterations.

As PCAP files are created, Visibility Manager retrieves the information from the 9920 device and displays the information in the Visibility Manager interface.

Procedure

In the Navigation menu, select Configure.
In the Devices panel, right-click a 9920 device and select Packet Capture.
Select Configure Port Capture.
Select whether to Start or Stop a packet capture.
In the Port field, select a port on which to capture packets.
Select whether to collect Ingress packets, Egress packets, or Both types.
In the Packet Count field, select the number of packets that you want to capture.
Select Add.
The capture configuration for the selected port is displayed on the right.
Repeat steps 4 through 8 as needed to configure PCAPs for more ports.
PCAP configuration is supported for a maximum of 10 ports for the selected device.
Save (✔) your changes.
The Packet Capture page displays running PCAPs and PCAP results.