11-24-2015 12:59 AM
Hi
you'll want to start with disabling pre-parse match, this will basically bypass your filter as it tells your packet-diag to listen for everything before it hits any logic, which includes your filters. this is why you're seeing so much unrelated logs:
> debug dataplane packet-diag set filter pre-parse-match no
next, you will want to clear any sessions that already exist as an existing session will not show up in flow basic or packetcaptures
> clear session all filter source 10.20.11.173 sessions cleared > clear session all filter destination 10.20.11.173 sessions cleared
depending on the kind of traffic you're trying to capture, it may get offloaded at which point flow basic will not be able to log additional packets, so you can disable offloading if required:
> set session offload no
(make sure to re-enable offloading after you're done)
hope this helps!
Tom
