{"id":265,"date":"2021-07-07T10:05:12","date_gmt":"2021-07-07T10:05:12","guid":{"rendered":"https:\/\/collabeer.com\/?p=265"},"modified":"2021-07-07T10:05:29","modified_gmt":"2021-07-07T10:05:29","slug":"expressway-roatating-pcaps","status":"publish","type":"post","link":"https:\/\/collabeer.com\/?p=265","title":{"rendered":"Expressway rotating PCAPs"},"content":{"rendered":"\n<p>Sometimes its good for specific calls to have also a full packet capture from Expressway. Here we go:<\/p>\n\n\n\n<p>How to enable it:<\/p>\n\n\n\n<p>1. Open SSH session to the Expressway server and login using the root command<br>2. Start the tcpdump with the appropriate filter, see below:<br><br><em>tcpdump -i any -s 0 -C 50 -W 25 -w \/mnt\/harddisk\/log\/&lt;set a name&gt;_$(hostname)_ &amp;<\/em><\/p>\n\n\n\n<p>Rotating tcpdump, How to stop it when the issue occurred:<\/p>\n\n\n\n<p>1. Look up the process id using : &#8220;<em>pidof tcpdump<\/em>&#8221; command<br>2. Kill this process using &#8220;<em>kill &lt;pid-of-previous-command&gt;<\/em>&#8221; command<br>3. Collect using WinSCP the files named as <em>&lt;set a name&gt;_(hostname)<\/em> found under <em>\/mnt\/harddisk\/log folder<\/em><\/p>\n\n\n\n<p>Happy Capture!!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Sometimes its good for specific calls to have also a full packet capture from Expressway. Here we go: How to enable it: 1. Open SSH session to the Expressway server and login using the root command2. Start the tcpdump with the appropriate filter, see below: tcpdump -i any -s 0 -C 50 -W 25 -w [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-265","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/collabeer.com\/index.php?rest_route=\/wp\/v2\/posts\/265","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/collabeer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/collabeer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/collabeer.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/collabeer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=265"}],"version-history":[{"count":2,"href":"https:\/\/collabeer.com\/index.php?rest_route=\/wp\/v2\/posts\/265\/revisions"}],"predecessor-version":[{"id":267,"href":"https:\/\/collabeer.com\/index.php?rest_route=\/wp\/v2\/posts\/265\/revisions\/267"}],"wp:attachment":[{"href":"https:\/\/collabeer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=265"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/collabeer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=265"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/collabeer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=265"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}