====== Ativar captura em roteadores Cisco ======


  * Define um buffer de captura

<code>monitor capture buffer BUF size 2048 max-size 1518 linear</code>

  * Define uma acl para capturar
<code>
configure terminal
ip access-list extended BUF-FILTER
    permit ip host 192.168.1.1 host 172.16.1.1
    permit ip host 172.16.1.1 host 192.168.1.1
    exit
exit
</code>

  * Associa o buffer com a acl
    
<code>monitor capture buffer BUF filter access-list BUF-FILTER</code>

  * Define qual interface e direção capturar

<code>monitor capture point ip cef POINT fastEthernet 0/0 both</code>

  * Associa o ponto de captura com o buffer


<code>monitor capture point associate POINT BUF</code>

  * Inicia captura

<code>monitor capture point start POINT</code>

  * Stop captura

<code>monitor capture point stop POINT</code>

  * Exporta captura via tftp

<code>
monitor capture buffer BUF export tftp://192.168.1.2/BUF.pcap
</code>



====== Desativar captura ======


<code>no monitor capture point ip cef POINT fastEthernet 0/0</code>

<code>no monitor capture buffer BUF filter access-list</code>

<code>no monitor capture buffer BUF</code>

<code>
configure terminal
no ip access-list extended BUF-FILTER
</code>

====== Comando para verificação ======

  * Visualizar a captura

<code>
show monitor capture buffer all parameters
</code>
  * Visualizar o buffer de captura

<code>
show monitor capture buffer BUF dump
</code>

  * Visualizar ACL.

<code>show ip access-lists BUF-FILTER</code>

  * Verificar pontos de captura

<code>show monitor capture point all</code>