Administrator Guide

Layer 2 Switching Commands 644
• Once configured, there is no network connectivity on the probe
(destination) port. The probe port does not forward any traffic and does
not receive any traffic. The probe tool attached to the probe port is unable
to ping the networking device or ping through the networking device, and
no device is able to ping the probe tool.
• ACL attributes redirect, mirror, log, rate-limit, assign-queue, time-range,
IGMP type, ICMP type, ICMP code, routing, fragments, and TCP
established are not supported when applied to a mirroring session.
Commands in this Section
This section explains the following commands:
monitor capture (Global Configuration)
Use the monitor capture command to capture packets transmitted or
received from the CPU. This facility captures switch control plane traffic and
is useful in monitoring network control traffic and analyzing network security.
No monitor capture file size returns the capture file size to the defaults.
No monitor capture remote port returns the TCP port to the default.
Syntax
monitor capture {file size max-size | remote port id | line wrap}
no monitor capture {file size |remote port |line wrap}
• max-size— The size of the capture file in bytes.
•id— The local (switch) TCP port for use with Wireshark.
Default Configuration
Capture is not enabled by default.
monitor capture (Global Configuration) remote-span
monitor capture (Privileged Exec) show monitor capture
monitor capture mode show monitor session
monitor session show vlan remote-span