Cisco Catalyst 3650 Series User Manual

monitor capture match
Do not use this command when capturing a CAPWAP tunnel. Also, when control plane and CAPWAP
tunnels are mixed, this command will have no effect.
Note
To define an explicit inline core filter for a monitor (Wireshark) capture, use the monitor capture match
command in privileged EXEC mode. To remove this filter, use the no form of this command.
monitor capture {capture-name} match {any | mac mac-match-string | ipv4 {any | host | protocol}{any |
host} | ipv6 {any | host | protocol}{any | host}}
no monitor capture {capture-name} match
Syntax Description
The name of the capture to be assigned a core filter.
capture-name
Specifies all packets.any
Specifies a Layer 2 packet.
mac mac-match-string
Specifies IPv4 packets.ipv4
Specifies the host.host
Specifies the protocol.protocol
Specifies IPv6 packets.ipv6
Command Default
A core filter is not configured.
Command Modes
Privileged EXEC
Command History
ModificationRelease
This command was introduced.Cisco IOS XE 3.3SE
Examples
To define a capture point and the core filter for the capture point that matches to any IP version 4 packets on
the source or destination:
Device# monitor capture mycap interface GigabitEthernet1/0/1 in
Device# monitor capture mycap match ipv4 any any
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
500
monitor capture match

Cisco Catalyst 3650 Series Specifications

General

Brand	Cisco
Model	Catalyst 3650 Series
Category	Switch
Language	English