Just a query about EPC.
I was doing some packet captures on a 9300 running 16.9.4
I had a read through the configuration guide and it lists the following restriction.
Embedded Packet Capture is not supported on logical ports, which includes port channels, switch virtual interfaces (SVIs), and subinterfaces. It is supported only on physical ports.
I set up the following capture with a SVI as the interface to capture in both directions. .
Status Information for Capture drillcap
Interface: Vlan704, Direction: BOTH
Status : Inactive
Source IP: 172.16.229.16/28
Destination IP: any
Buffer Type: LINEAR (default)
Associated file name: flash:drillcap.pcap
Size of buffer(in MB): 100
Number of Packets to capture: 0 (no limit)
Packet Capture duration: 600
Packet Size to capture: 0 (no limit)
Maximum number of packets to capture per second: 1000
Packet sampling rate: 0 (no sampling)
I seem to be able to capture with those settings. ALTHOUGH… i do seem to be missing some data that I believe is there. Would this be expected or it shouldn’t work at all?