Procedure 4 - TCP Dump
The TCP Dump utility monitors the contents of packets on a network interface that match a given Boolean expression. You can use this utility to troubleshoot problems on your network. Cisco ISE troubleshooting diagnostic tools provide an intuitive user interface.
| Step 1 |
| - Go to Operations →
Troubleshoot → Diagnostic Tools → TCP Dump. |
| Step 2 |
| Select a Network
Interface to monitor from the drop-down menu. This is the interface
upon which the network traffic is monitored, or sniffed. |
| Step 3 |
| Set Promiscuous Mode
to On or Off by clicking the radio button. The default is On. |
| Step 4 |
| Promiscuous Mode is
the default packet sniffing mode. It is recommended that you leave
it set to On. In this mode, the network interface is passing all
traffic to the system's CPU. |
| Step 5 |
| In the Filter field,
enter a Boolean expression on which to filter. Standard TCP Dump
filter expressions are supported, such as the following: host
10.0.2.1 and port 1812 |
| Step 6 |
| Click Start to begin
monitoring the network. |
| Step 7 |
| Click Stop when you
have collected a sufficient amount of data, or wait for the process
to conclude automatically after accumulating the maximum number of
packets (500,000). |