I did packet capturing with cisco's Embedded Packet Capture and I would like to view the output in Wireshark. The problem is that I only have CLI access to the device, so exporting via TFTP is not an option. Can I somehow copy/paste the buffer output into Wireshark so it can interpret it?


Thanks for the help!

  • Can you “copy [filename] scp:” on the router to initiate an outbound scp (which uses ssh) connection? Do you have physical access to the router to copy the dump to a usb: drive? Feb 27 '20 at 15:50
  • Cisco IOS has many different methods to copy files to/from a router using the CLI. In fact, you can use TFTP using the CLI. At the CLI, type copy ? to see the various options.
    – Ron Maupin
    Feb 27 '20 at 16:08
  • Unfortunately I have limited access to the device. I can reach it via 2 hop servers, on which I have only SSH command allowed.
    – human374
    Mar 2 '20 at 14:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.