HPE Network Switching Professional (HPE7-A08)

A mirror session with the CPU as its destination lets Tshark capture the mirrored traffic into a PCAP file on the CX switch for transfer to a remote server. A destination interface or ERSPAN forwards traffic for external analysis, while real-time tcpdump output does not produce the required complete capture file. Aruba documents CPU-destined mirroring for Tshark captures and the copy tshark-pcap workflow for transferring capture data to a remote secure file-transfer server.