> Type of protocol – eg ip, gre, esp, icmp etc> Used to specify the interface on which you want to apply the captureĬapture packets matching five-tuple – 5 tuple consists of Here is link for iana assigned ethernet type numbers Ĭapture only L2, 元 and L4 headers of packet without data in them, useful for collecting partial packet capture It is used to indicate which protocol is encapsulated in the PayLoad of an Ethernet Frame.
Overwrite buffer from beginning when full, default is non-circularĮtherType is a two-octet field in an Ethernet frame. Just a note of caution – applying captures will add to memory utilization so keep an eye on memory before enabling captures with max buffer
These are the options available access-listĬapture packets that match access-list, when you specify access-list make sure that you specify the traffic in both direction if you want to capture bi-directional trafficĭefault is 512 KB and you can configure it upto 32 MB, you do not need to change this in most cases.
