Embedded Packet Capture
Feature History rau Embedded Packet Capture
Cov lus no muab kev tso tawm thiab cov ntaub ntawv muaj feem cuam tshuam txog cov yam ntxwv tau piav qhia hauv ntu no. Qhov no feature kuj muaj nyob rau hauv tag nrho cov kev tso tawm tom ntej mus rau ib tug nyob rau hauv uas lawv tau qhia nyob rau hauv, tshwj tsis yog sau tseg lwm yam.
Table 1: Feature Keeb Kwm rau Embedded Packet Capture
| Tso tawm | Feature | Cov ntaub ntawv tshwj xeeb |
| Cisco IOS XE Dublin 17.12.1 |
Embedded Packet ntes |
Lub Embedded Packet Capture feature yog txhim kho los txhawb qhov tsis muaj qhov loj me, kev ntes txuas ntxiv, thiab lim ntawm ntau qhov chaw nyob MAC hauv ib qho Embedded Packet Capture (EPC) ntu. |
Cov ntaub ntawv hais txog Embedded Packet Capture
Lub Embedded Packet Capture feature pab hauv kev taug qab thiab daws cov pob ntawv teeb meem. Lub Embedded Packet Capture ntawm tus maub los yog siv rau kev daws teeb meem ntau yam teeb meem, xws li, kev txheeb xyuas qhov teeb meem nrog RADIUS, AP koom lossis kev cuam tshuam, tus neeg siv khoom xa tawm, kev sib txuas, thiab kev sib tw, thiab lwm yam tshwj xeeb xws li multicast, mDNS, kaus mom, txav mus los, thiab yog li ntawm.Qhov no tso cai rau cov thawj coj hauv lub network tuaj yeem ntes cov ntaub ntawv pob khoom ntws los ntawm, mus rau, thiab los ntawm Cisco ntaus ntawv. Thaum teeb meem kev koom nrog AP lossis tus neeg siv khoom ntawm qhov teeb meem, yog tias koj tsis tuaj yeem nres ntes sai li sai tau thaum muaj teeb meem tshwm sim, cov ntaub ntawv tseem ceeb yuav ploj. Feem ntau, qhov tsis ntawm 100 MB tsis txaus rau kev ntes cov ntaub ntawv. Ntxiv mus, qhov uas twb muaj lawm Embedded Packet Capture feature txhawb nqa tsuas yog lim ntawm ib qho chaw nyob hauv MAC, uas ntes cov tsheb khiav ntawm ib tus neeg siv khoom tshwj xeeb. Qee lub sij hawm, nws nyuaj rau pin-point uas tus neeg siv wireless tab tom ntsib teeb meem.
Los ntawm Cisco IOS XE Dublin 17.12.1, Embedded Packet Capture feature txhawb nqa qhov loj me me, kev ntes txuas ntxiv, thiab lim ntawm ntau qhov chaw nyob MAC hauv ib qho kev sib tham Embedded Packet Capture. Tsis muaj GUI cov kauj ruam los teeb tsa Embedded Packet Capture txhim kho.
Configuring Embedded Packet Capture (CLI)
Nrog rau qhov Embedded Packet Capture feature txhim kho, qhov tsis zoo yog nce los ntawm 100 MB txog 500 MB.
Nco tseg
Buffer yog hom nco. Koj tuaj yeem tuav lub cim xeeb tsis tau lossis luam tawm lub cim xeeb tsis muaj nyob hauv a file khaws cov ntaub ntawv ntxiv.
Txheej txheem
| Hais kom ua los yog ua | Lub hom phiaj | |
| Kauj ruam 1 | Example: pab Ntaus> pab |
Ua kom muaj cai EXEC hom. Sau koj tus password, yog tias tau hais. |
| Kauj ruam 2 | saib xyuas kev ntes epc-session-name interface GigabitEthernet interface-ntaus {ob leeg hauv tawm} Example: Ntaus # saib ntes epc-session1 interface GigabitEthernet 0/0/1 ob qho tib si |
Configures Gigabit Ethernet interface rau inbound, outbound, los yog ob qho tib si inbound thiab cov pob ntawv tawm sab nraud. Gigabit yog rau Cisco 9800-CL controllers, rau example, Gi1, Gi2, or Gi3. Rau cov tswj lub cev, koj yuav tsum qhia meej qhov chaw nres nkoj channel, yog tias teeb tsa. Examples rau lub cev interfaces yog Te or Tw. Nco tseg Koj tseem tuaj yeem khiav cov lus txib-dav dav hlau los ntes cov pob ntawv punt rau CPU. |
| Kauj ruam 3 | (Yeem) saib xyuas epc-session-name txwv lub sijhawm txwv-lub sijhawm Example: Ntaus # saib ntes epc-session1 txwv lub sijhawm 3600 |
Configures saib capture txwv, nyob rau hauv vib nas this. |
| Kauj ruam 4 | (Yeem) saib xyuas epc-session-name buffer ncig file tsis muaj-files file-size per-file- qhov loj Example: Ntaus # saib ntes epc-session1 tsis muaj lub voj voog file 4 file-Size 20 |
Configures cov file nyob rau hauv voj voog tsis. (Buffer tuaj yeem yog ncig lossis linear). Thaum lub voj yog configured, lub files ua hauj lwm raws li lub nplhaib tsis. Tus nqi ntau ntawm tus lej of files yuav tsum configured yog los ntawm 2 mus rau 5. Tus nqi ntau ntawm cov file Qhov loj me yog los ntawm 1 MB txog 500 MB. Muaj ntau cov lus tseem ceeb muaj rau cov lus txib tsis, xws li, ncig, file, thiab loj. Ntawm no, lub voj voog hais kom ua yog xaiv tau. Nco tseg Circular buffer yog xav tau rau kev ntes mus tas li. Cov kauj ruam no generates swap files hauv tus maub los. Sib pauv files tsis yog pob ntawv ntes (PCAP) files, thiab yog li ntawd, tsis tuaj yeem txheeb xyuas. Thaum cov lus txib export khiav, sib pauv files tau ua ke thiab xa tawm ua ib qho PCAP file. |
| Kauj ruam 5 | saib xyuas kev ntes epc-session-name match {ib yam | ipv4 | ipv 6 | mac os | pklen-ntaus} Example: Ntaus # saib ntes epc-session1 phim ib qho |
Configures inline filters. Nco tseg Koj tuaj yeem teeb tsa cov ntxaij lim dej thiab ACLs. |
| Kauj ruam 6 | (Yeem) saib xyuas epc-session-name access-list access-list-name Example: Ntaus # saib ntes epc-session1 access-list access-list1 |
Configures ib tug saib capture qhia ib daim ntawv nkag mus raws li lub lim rau cov pob ntawv ntes. |
| Kauj ruam 7 | (Yeem) saib xyuas epc-session-name nruam-capture http:location/filenpe Example: Device# saib capture epc-session1 nruam-capture https://www.cisco.com/epc1.pcap |
Configures nruam pob ntawv capture. Enables tsis siv neeg export ntawm files rau ib qho tshwj xeeb qhov chaw ua ntej qhov tsis yog overwritten. Nco tseg • Circular buffer yog xav tau rau kev ntes mus tas li. • Configure lub filenpe nrog ib tug .pcap extension. • Ib example cov filelub npe thiab nomenclature siv los tsim lub filelub npe yog raws li nram no: CONTINUOUS_CAP_20230601130203.pcap CONTINUOUS_CAP_20230601130240.pcap • Tom qab cov pob ntawv raug xa tawm tuaj yeem raug tshem tawm, qhov tsis raug tshem tawm kom txog thaum nws tau sau los ntawm cov pob khoom tshiab tuaj, lossis tshem tawm, lossis tshem tawm cov lus txib. |
| Kauj ruam 8 | (Yeem) [tsis muaj] saib ntes epc-session-name puab mac MAC1 [MAC2… MAC10]
Example: Ntaus # saib ntes epc-session1 mac os 1.1.1 2.2.2 3.3.3 4.4.4 |
Configures mus txog 10 MAC chaw nyob raws li sab hauv MAC lim. Nco tseg • Koj tsis tuaj yeem hloov kho cov MAC sab hauv thaum qhov kev ntes tau ua tiav. • Koj tuaj yeem nkag mus rau MAC chaw nyob hauv ib qho lus txib lossis los ntawm kev siv ntau cov kab hais kom ua. Vim yog cov cim kab txwv, koj tuaj yeem nkag tsuas yog tsib qhov chaw nyob MAC hauv ib qho kab hais kom ua. Koj tuaj yeem nkag mus rau seem ntawm MAC chaw nyob hauv kab hais kom ua tom ntej. • Yog tias tus naj npawb ntawm qhov chaw nyob hauv MAC yog 10, qhov chaw nyob MAC tshiab tsis tuaj yeem teeb tsa kom txog thaum koj rho tawm qhov qub teeb tsa sab hauv MAC chaw nyob. |
| Kauj ruam 9 | saib capture epc-session-name start Example: Ntaus # tsis muaj saib ntes epc-session1 pib |
Pib ntes cov ntaub ntawv pob ntawv. |
| Kauj ruam 10 | saib ntes epc-session-name nres Example: Ntaus # tsis saib xyuas epc-session1 nres |
Tsis txhob ntes cov ntaub ntawv pob ntawv. |
| Kauj ruam 11 | saib xyuas capture epc-session-name export fileqhov chaw/filenpe Example: Ntaus # saib ntes epc-session1 export https://www.cisco.com/ecap-file.pcap |
Exports captured cov ntaub ntawv rau kev tsom xam thaum nruam capture tsis configured. |
Xyuas kom paub tseeb tias Embedded Packet Capture
Rau view lub configured file naj npawb thiab per file size, khiav cov lus txib hauv qab no:
Nco tseg
Cov lus txib hauv qab no tau tshwm sim tsis hais seb qhov kev ntes txuas ntxiv puas tau qhib lossis tsis tau. Cov teeb tsa sab hauv MAC chaw nyob kuj tshwm sim siv cov lus txib no.
Rau view qhov configured Embedded Packet Capture buffer files, khiav cov lus txib hauv qab no:
Cov ntaub ntawv / Cov ntaub ntawv
 |
CISCO 9800 Series Catalyst Wireless Controller Embedded Packet Capture [ua pdf] Cov neeg siv phau ntawv qhia 9800 Series Catalyst Wireless Controller Embedded Packet Capture, 9800 Series, Catalyst Wireless Controller Embedded Packet Capture, Wireless Controller Embedded Packet Capture, Controller Embedded Packet Capture, Embedded Packet Capture, Ntim Ntim, Capture |
 |
CISCO 9800 Series Catalyst Wireless Controller [ua pdf] Cov neeg siv phau ntawv qhia 9800 Series Catalyst Wireless Controller, 9800 Series, Catalyst Wireless Controller, Wireless Controller, Tswj |
