Monday 3 February 2020

CUBE Pcap

CUBE :-
*) Need to take capture from both internal and external interface of the CUBE, to understand the packets/Audio coming in and going out of the CUBE router in both directions.
*) Also enable below debugs in router to track the call.

Debugs/Packet capture in the router:-

- Commands to enable ip traffic packet capture:-

conf t

ip traffic-export profile sniffer1 mode capture
bidirectional
ip traffic-export profile sniffer2 mode capture
bidirectional

interface gig x/x/x           /// External interface
ip traffic-export apply sniffer1

interface gig x/y/z           /// Internal interface
ip traffic-export apply sniffer2

end

- To START/STOP/COPY capture in the router.

traffic-export interface gig x/x/x stop
traffic-export interface gig x/x/x clear

*) Enable below debugs

debug voip ccapi inout
debug ccsip messa
debug ccsip media
debug ccsip error
debug ccsip event
debug voip rtp session name

*) Procedure to collect capture/debug:-

traffic-export interface gig x/x/x stop
traffic-export interface gig x/x/x clear 

traffic-export interface gig x/y/z stop
traffic-export interface gig x/y/z clear

clear log
<confirm>

traffic-export interface gig x/x/x start
traffic-export interface gig x/y/z start

*) Do the test calls, once the test call is done, do the below.

traffic-export interface gig x/x/x stop
traffic-export interface gig x/y/z stop
un all


term len 0
sh log
sh run
sh vers//

traffic-export interface gig x/x/x copy flash:gigxxx.pcap

traffic-export interface gig x/y/z copy flash:gigxyz.pcap


To copy the file over SSH you can use

Pscp.exe -pw C1sco123 admin@10.X.X.X:flash:pcap  "c:\Temp"
Or
Copy Flash:filename.pcap scp://172.X.X.X/



traffic-export interface gig 0/1 stop
traffic-export interface gig 0/1 clear
traffic-export interface gig 0/0.342 stop
traffic-export interface gig 0/0.342 clear 


traffic-export interface gig 0/1 start

traffic-export interface gig 0/0.342 start



traffic-export interface gig 0/0.342 copy flash:gig0.342dialtone.pcap

traffic-export interface gig 0/1 copy flash:gig1dialtone.pcap


traffic-export interface gig 0/1 stop
traffic-export interface gig 0/0.342 stop