USE OF DUMPCAP IN ACLI LOCAL PACKET-TRACE CAPTURE

Hello.

 

Have the 6300 SCZ7.1.2

Can someone hint me on the SYNTAX for a  successful capture?

Getting Errors.

Example 1

ACMEPACKET# packet-trace local K23:100 "ip.addr eq 41.206.23.216"

 

dumpcap: Invalid argument: eq

Usage: dumpcap [options] ...

Capture interface:
-i <interface> name or idx of interface (def: first non-loopback)
-f <capture filter> packet filter in libpcap filter syntax
blah  blah  blah  blah  blah  blah  blah  blah  blah  blah  ......

 

Example 2

ACMEPACKET# packet-trace local K23:100 "dumpcap -f net=1.2.3.0/24 -a duration:60"
% incorrect number of arguments, usage is:
packet-trace monitor <network-interface> [<capture-filter>]

 

Example 3

ACMEPACKET# packet-trace local K23:100 "dumpcap -i etho -w /opt/traces/Kool.pcap"
The capture session could not be initiated (No such device exists).