Packet Capture
Support > Technical Assistance > Packet Capture
When requested by Support, use this tab to capture packets for appliances that are selected in the appliance tree.
The following table describes each field on this tab.
| Field | Description |
|---|---|
| Maximum number of packets | Enter the maximum number of packets to capture. |
| Filter by IP (optional) | Enter the host or IP address to capture from. |
| Filter by port number (optional) | Enter the port to capture from. For example, to capture DNS traffic, enter 53. |
| Bytes to capture from each packet (snap length) | Enter the number of bytes (the amount of data) for each frame to capture. For example, enter 96 to capture headers only or 1500 to capture full frames.NOTE: Configuring a large snap length will result in larger packet capture file sizes. |
| Additional filter options | Enter other options to filter the capture. For example, proto 17 src 1.1.1.1 |
| Enable circular storage | Select this check box to limit the amount of data to store by setting a maximum number of files and maximum file size for the capture. For example, set the Number of files to 5 and Max size per file to 100 (MB). Once the size limit is reached for a file, a new file will be written. Once the maximum number of files is reached, the oldest file will be overwritten. |
| Number of files | If you enabled circular storage, enter the maximum number of files that can be stored for this packet capture. |
| Max size per file | If you enabled circular storage, enter the maximum file size that can be stored for this packet capture. |
| Command preview | Displays the progress of the packet capture. |
Click Run to initiate the packet capture.
Click Stop to cancel the packet capture.