Before modifying the encapsulation on a device interface that is configured for packet capture, you must disable packet capture and rename the latest packet capture file. Otherwise, packet capture saves the packets with different encapsulations in the same packet capture file. Packet files containing packets with different encapsulations are not useful, because packet analyzer tools like tcpdump cannot analyze such files.
After modifying the encapsulation, you can safely reenable packet capture on the router.
To change the encapsulation on packet capture-configured interfaces:
- user@host> start shell
- %
- % cd /var/tmp
- %
- % mv pcap-file.fe.0.0.0 pcap-file.fe.0.0.0.chdsl
- %
- % exit
- user@host>
See instructions for configuring interfaces in the JUNOS Software Interfaces and Routing Configuration Guide