• Define um buffer de captura

monitor capture buffer BUF size 2048 max-size 1518 linear

• Define uma acl para capturar

configure terminal
ip access-list extended BUF-FILTER
    permit ip host 192.168.1.1 host 172.16.1.1
    permit ip host 172.16.1.1 host 192.168.1.1
    exit
exit

• Associa o buffer com a acl

monitor capture buffer BUF filter access-list BUF-FILTER

• Define qual interface e direção capturar

monitor capture point ip cef POINT fastEthernet 0/0 both

• Associa o ponto de captura com o buffer

monitor capture point associate POINT BUF

• Inicia captura

monitor capture point start POINT

• Stop captura

monitor capture point stop POINT

• Exporta captura via tftp

monitor capture buffer BUF export tftp://192.168.1.2/BUF.pcap

no monitor capture point ip cef POINT fastEthernet 0/0

no monitor capture buffer BUF filter access-list

no monitor capture buffer BUF

configure terminal
no ip access-list extended BUF-FILTER

• Visualizar a captura

show monitor capture buffer all parameters

• Visualizar o buffer de captura

show monitor capture buffer BUF dump

• Visualizar ACL.

show ip access-lists BUF-FILTER

• Verificar pontos de captura

show monitor capture point all