Capture Packets to a File

To capture control plane and data plane packets in real time, similar to a UNIX tcpdump operation, and to save these packets to a file (available on vEdge routers only):

1. In vManage NMS, select the Monitor ► Network screen.
2. Select the device:
   1. From the Device Groups drop-down list, select the device group to which the device belongs. The device table lists all the devices in the selected group.
   2. Select the device by clicking its hostname. The left pane lists the information categories about the device.
3. Click Troubleshooting in the left pane.
4. From the Traffic pane, click App Packet Capture.
5. From the VPN drop-down, select the VPN in which to capture packets.
6. From the Interface drop-down, select the interface over which to capture packets.
7. Optionally, click Traffic Filter to filter the packets to capture based on values in their IP headers. Enter values for one or more of these fields:
   1. In Source IP, enter the packets' source IP address.
   2. In Source Port, enter the packets' source port number.
   3. In Protocol, enter the packets' protocol number
   4. In Destination IP, enter the packets' destination IP address.
   5. In Destination Port, enter the packets' destination port number.
8. Click Start. The packet capture begins, and displays its progress:
   1. Packet Capture in Progress—Packet capture stops after 5 minutes, after the file of collected packets reaches 5 MB, or when you click the Stop button.
   2. Preparing file to download—vManage NMS creates a file in libpcap format (a .pcap file).
   3. File ready, click to download the file—Click the download icon to download the generated file.