Usually I used TCPdump from shell to capture the the life packet on Junos. Yesterday, I’ve got another TCPdump command from my friend blog, Przemyslaw (Thanks dude). The good thing is, now this command available from cli 
Here it is:
aragorn@gandalf> monitor traffic interface ge-7/0/0 write-file debug-bgp.cap
You can use wireshark to open the captured file. However, this command is hidden command, so have to type it completely.
The traffic you monitor with above command is transit traffic or the one directed to RE ( Routeing Engine).
Comment by Masood Ahmad Shah — September 10, 2008 @ 1:24 AM
Hi Masood, it is used to capture packet to RE.
Comment by adisubrata — September 10, 2008 @ 1:38 AM