4 Capturing tcpdump from CNE

Perform the following steps to capture tcpdump in CNE:

  1. Run the following command to identify the worker node for the running pod:
    $ kubectl get pods -n ocnadd -o wide
  2. Login to the worker node and run the following command to search for the IP address of the pod:
    $ ip a
  3. Run the following command to start tcpdump on the identified network interface:
    $ sudo tcpdump -n -s0 -i <interface> w <file-name>.pcap -Z <node-user-name>
  4. Run the following command to change the file permissions:
    $ chmod 777 <file-name>.pcap
  5. Exit the worker node and run the following command to scp the file from the bastion host:
    $ scp <user-name>@<worker node>:<path-in-workerNode-machine>