The packets going through the Ethernet port eth1, for traffic for which the source or theĭestination is the unit with the 00:90:F8:07:5A:6D MACĪddress. plink.exe -ssh -no-antispoof -pw 'administrator' 'pcapture -raw -i eth1 dst port 5060 ' | wireshark -k -i -Capture plink.exe -ssh -no-antispoof -pw 'administrator' 'pcapture -raw -i eth1 src port 5060 ' | wireshark -k -i -CaptureĮth1, but using port 5060 as the destination plink.exe -ssh -no-antispoof -pw 'administrator' 'pcapture -raw -i eth1 port 5060 ' | wireshark -k -i -Capture plink.exe -ssh -no-antispoof -pw 'administrator' 'pcapture -raw -i eth1 -t rtp ' | wireshark -k -i -CaptureĮth1, but using port 5060 only (either source orĭestination). plink.exe -ssh -no-antispoof -pw 'administrator' 'pcapture -raw -i eth1.100' | wireshark -k -i -Captureįrom the uplink interface of the Mediatrix unit, the packets going through the Ethernet port plink.exe -ssh -no-antispoof -pw 'administrator' 'pcapture -raw -i eth1 not broadcast and not multicast' | wireshark -k -i -Captureįrom the uplink interface of the Mediatrix unit, the packets of the VLan for which the VlanId Do NOT upload all of the files that were captured.Capture from the uplink interface of the Mediatrix unit, and filtering out the Ideally, the desired packets captured will all be in a single file. Upload only the file(s) that contain the packets corresponding to the issue or behavior observed.Upload the corresponding file(s) to the support case.It is good practice to allow a little bit of time to pass (1 minute or so) after the issue is observed unless the support engineer directs otherwise.Define the interval for by checking checkbox for time, file size, and/or a cert ian number of packets and specify parameters accordingly.Select the Output tab, and check the 'Create a new file automatically after.' checkbox.In the Input tab, select the interface(s) from which to capture packets so that they are highlighted.Prepare the needed conditions to recreate the behavior of the issue in question.Follow these steps to make use of this function in Wireshark. This will create multiple packet capture files of the consecutive events separated by a defined interval of time, file size, and/or a certain number of packets. Make use of Wireshark's rolling captures.

Wireshark packet capture file