Difference between revisions of "How to perform a snoop packet capture"

From Tech-Wiki
Jump to: navigation, search
(Created page with "Category:Juniper Networks http://kb.juniper.net/KB5411 snoop info snoop detail or snoop detail len <snaplen 1-1514> snoop filter ... (see the CLI-help for filter options...")
 
 
(2 intermediate revisions by one other user not shown)
Line 1: Line 1:
[[Category:Juniper Networks]]
+
[[Category:Juniper_Networks]]
  
 
http://kb.juniper.net/KB5411
 
http://kb.juniper.net/KB5411
 +
 +
The debug buffer is a circular buffer, once the buffer has reached the size limit, the oldest data will be overwritten.<br />
 +
The buffer size is configurable.<br />
 +
To change the size, use the following commands:
 +
 +
set db size 4096
 +
set console dbuf
 +
clear db
 +
 +
To set-up the packet snoop:
  
 
  snoop info
 
  snoop info
Line 8: Line 18:
 
  clear dbuf
 
  clear dbuf
 
  snoop
 
  snoop
'' reproduce the issue''
+
 
Stop the capture with <ESC> and then display the output with the command
+
''Reproduce the issue.''<br />
  get dbuf stream or get dbuf stream > tftp W.X.Y.Z name-of-file
+
The timestamp resolution of the output is in tenths of a second.<br />
 +
Stop the capture and then display the output with the following commands:
 +
 
 +
snoop off
 +
  get dbuf stream or get dbuf stream > tftp <host> <name-of-file>
 +
 
 +
To clear down:
 +
snoop filter delete
 +
clear dbuf

Latest revision as of 02:31, 8 August 2016


http://kb.juniper.net/KB5411

The debug buffer is a circular buffer, once the buffer has reached the size limit, the oldest data will be overwritten.
The buffer size is configurable.
To change the size, use the following commands:

set db size 4096
set console dbuf
clear db

To set-up the packet snoop:

snoop info
snoop detail or snoop detail len <snaplen 1-1514>
snoop filter ... (see the CLI-help for filter options)
clear dbuf
snoop

Reproduce the issue.
The timestamp resolution of the output is in tenths of a second.
Stop the capture and then display the output with the following commands:

snoop off
get dbuf stream or get dbuf stream > tftp <host> <name-of-file>

To clear down:

snoop filter delete
clear dbuf