Remote packet capture configuration example

As shown in Figure 97, capture packets on Ten-GigabitEthernet 1/0/1 and use Wireshark to display the captured packets.

1. Configure remote packet capture on Ten-GigabitEthernet 1/0/1 and specify the RPCAP service port number as 2014.

   <Device> packet-capture remote interface ten-gigabitethernet 1/0/1 port 2014
   

2. Display captured packets on the PC:

   1. Start Wireshark and select Capture > Options.

   2. Select Remote from the Interface list.

   3. Enter an IP address of 10.1.1.1 and a port number of 2014, and click OK.

   4. Click Start.

      The captured packets are displayed on the page that appears.

   Figure 98: Displaying the captured packets on the Wireshark