Packet capture on a router
monitor capture buffer buffer-name
[size buffer-size] [circular| linear]]monitor capture point {ip| ipv6}{cef capture-point-name interface-name interface-type{both | in | out}|process-switched capture-point-name {both| from-us| in | out}}
monitor capture point associate capture-point-name capture-buffer-name
monitor capture point start {capture-point-name | all}
EXAMPLE:
monitor capture buffer BUFFER01 size 10000 max-size 10000 circular
monitor capture point ip cef CAPTURE01 Fas 0/2/2 both
monitor capture point associate CAPTURE01 BUFFER01
To start the capture:
monitor capture point start CAPTURE01
To stop the capture:
monitor capture point stop all