Earlier we used SPAN sessions to capture the real time traffic on the Cisco devices. Starting from CISCO IOS 12.4.20 onwards there is a new feature available called the Embedded Packet Capture. With the EPC we can save the packets traversing the router on flash disk and later pull them out using TFTP or FTP on your machine for further analysis.
Let us use the below topology to understand how the Embedded Packet Capture feature is configured:
We will capture ingress & egress traffic on Fa0/0 port of the router.
Steps to configure Embedded Packet Capture:
Step 1 –
Configure a capture buffer. Capture buffer can be linear and circular.
Linear: Stops capture when buffer is full.
Circular: Overwrites the old data when buffer is full.
I am here to share my knowledge and experience in the field of networking with the goal being - "The more you share, the more you learn."
I am a biotechnologist by qualification and a Network Enthusiast by interest. I developed interest in networking being in the company of a passionate Network Professional, my husband.
I am a strong believer of the fact that "learning is a constant process of discovering yourself."
- Rashmi Bhardwaj (Author/Editor)