diagnostic

Syntax

diagnostic

diag utilities tshark [file]
diag utilities tshark [delete-file]

Description

Captures packets from a mirror-to-cpu session, and save the most recent 32MB to pcap file which can then be copied and analyzed. When capturing a mirror-to-cpu session to a file, packets will not be dumped to the console.

NOTE:

The diagnostic command must be entered prior to the diag utilities tshark command.

Use the delete-file form of this command to delete the most recent capture file.

Since file and delete-file are optional, the behavior of the base command diag utilities tshark does not save anything to a file, and instead dumps the tshark session to the console until CTRL + c is entered.

Command context

Manager (#)

Parameters

file: Saves captured packets to a temporary file.
delete-file: Deletes the most recent captured file.

Authority

Administrators or local user group members with execution rights for this command.

Example

Performing diagnostic:

switch# diagnostic
	
switch# diagnostic utilities tshark file
Inspecting traffic mirrored to the CPU until Ctrl-C is entered
^CEnding traffic inspection.