2.3.2. Lab – tcpdump Packet Capture¶

2.3.2.1. Task 1 – Packet Captures of multiple interfaces simultaneously¶

1. Open SSH session window1, and enter on one line to perform capture in background:

   • tcpdump –ni client_vlan –eXs 0 –w /var/tmp/dump.cap & tcpdump –ni server_vlan –eXs 0 –w /var/tmp/dump2.cap &

2. Browse to http://10.1.10.100

3. Enter the following commands to stop captures:

   • Type fg then <crtl> c
   • Repeat, type fg then <crtl> c

4. Enter the following command to read packet captures

   • tcpdump –r /var/tmp/dump.cap & tcpdump –r /var/tmp/dump2.cap

   Attention

   Q1. What is the alternate method for capturing two interfaces simultaneously?

   Q2. What interface does 0.0 represent?

   Q3. What interface typically represents the management interface?

   Q4. What is recommended method for packet captures on high load system?

   Q5. Will tcpdump capture PVA accelerated traffic?