Maximum of three ACLs in a class map: one for IPv4, one for IPv6, and the otherĬapture packets on a destination SPAN port. Management ports, nor private VLANs can be used as attachment points.Įach type (IPv4, IPv6, MAC) is allowed in a Wireshark class map. Points can be defined, but only one can be active at a time. Not applied and should be omitted when capturing a CAPWAP tunnel.ĬAPWAP data tunnel, each CAPWAP tunnel is mapped to a physical port and anĪppropriate ACL will be applied to filter the traffic.ĬAPWAP non-data tunnel, the switch is set to capture traffic on all ports andĪpply an appropriate ACL to filter the traffic. Wireless capture is a CAPWAP tunnel capture.ĬAPWAP tunnels, no other interface types can be used as attachment points on Switch rewrite (includes TTL, VLAN tag, CoS,Ĭhecksum, MAC addresses, DSCP, precedent, UP, etc.).Ĭircular file storage by file size is not supported. NVGEN’d and are not synchronized to the standby supervisor in NSF and SSOĬaptured in the output direction of an interface might not reflect the changes Actions that usually occur in configuration submode (such as definingĬapture points), are handled at the EXEC mode instead. Supervisor Engine 7L-E, Catalyst 3850, Catalyst 3650, Wireless LAN Controllerĥ700 Series, Catalyst 4500X-16, and Catalyst 4500X-32.Ĭisco IOS Release XE 3.3.0 (SE), global packet capture on Wireshark is notĬonfiguring Wireshark requires that the feature be executed only from EXEC Wireshark is supported on Supervisor Engine 7-E,

Navigator to find information about platform support and Cisco software image To find information about the featuresĭocumented in this module, and to see a list of the releases in which eachįeature is supported, see the feature information table at the end of this For the latestĬaveats and feature information, see Bug Search Tool and the release notes for May not support all the features documented in this module.

Feature History and Information for WireShark.

Example: Simple Capture and Store of Packets in Egress Direction.

Example: Capture and Store in Lock-step Mode.

Example: Displaying Detailed Output from a.

Example: Displaying a Brief Output from a.Activating and Deactivating a Capture Point.Adding or Modifying Capture Point Parameters.

Wireshark Capture Point Activation and Deactivation.

Storage of Captured Packets to Buffer in Memory.

Wireshark cli