From the CLI use the utils network capture command. To capture everything, use parameters similar to that shown below.

utils network capture eth0 file packets count 10000 size all

• To stop the capture before the 10000 count press ctrl+c
• To retrieve the files use the command file get activelog platform/cli/packets.cap and providing valid SFTP server details
• Alternatively, log in using RTMT > Trace & Log Central > Collect Files > select Packet Capture Logs > Set the time interval as per normal and download

Updated - 28/05/2018

To locate capture files you can use the command file list activelog platform/cli

Example: