====== Ativar captura em roteadores Cisco ======
* Define um buffer de captura
monitor capture buffer BUF size 2048 max-size 1518 linear
* Define uma acl para capturar
configure terminal
ip access-list extended BUF-FILTER
permit ip host 192.168.1.1 host 172.16.1.1
permit ip host 172.16.1.1 host 192.168.1.1
exit
exit
* Associa o buffer com a acl
monitor capture buffer BUF filter access-list BUF-FILTER
* Define qual interface e direção capturar
monitor capture point ip cef POINT fastEthernet 0/0 both
* Associa o ponto de captura com o buffer
monitor capture point associate POINT BUF
* Inicia captura
monitor capture point start POINT
* Stop captura
monitor capture point stop POINT
* Exporta captura via tftp
monitor capture buffer BUF export tftp://192.168.1.2/BUF.pcap
====== Desativar captura ======
no monitor capture point ip cef POINT fastEthernet 0/0
no monitor capture buffer BUF filter access-list
no monitor capture buffer BUF
configure terminal
no ip access-list extended BUF-FILTER
====== Comando para verificação ======
* Visualizar a captura
show monitor capture buffer all parameters
* Visualizar o buffer de captura
show monitor capture buffer BUF dump
* Visualizar ACL.
show ip access-lists BUF-FILTER
* Verificar pontos de captura
show monitor capture point all