Capture Data Plane Packets
You can capture data packets only from SRX4600, SRX5400, SRX5600, and SRX5800 devices running the Junos OS Release 19.3 or later.
- Go to Monitor> Data Plane Packet Capture.
The Data Plane Packet Capture page is displayed.
- From the Device list, select the root device
from which you want to capture the data packets.Note:
The data plane packet capture feature is applicable only for root devices.
- In the Basic Filter section, perform the following
steps:
- Select the protocol to associate with the packet capture filter.
- Select the multitenancy type for the device.
If you select Tenant or LSYS, you are prompted to select the tenant or logical system for the device.
Note:The Tenant or LSYS devices must be in the same domain level as the root device selected in step 2.
- Select the required logical interface.
- In the Source & Destination Filter section,
perform the following steps:
- Enable the toggle switch to collect bidirectional information such as traffic from source port to destination port and vice-versa, if necessary.
- Enter the source and destination port numbers and the IPv4 or IPv6 address prefixes to filter the packets.
- In the Additional Settings section, perform
the following steps:
- Enter the maximum size of the packet capture file that
can be captured.Note:
The maximum permissible size is 20 MB.
- Enter the maximum length of the packet capture.Note:
The packet is truncated if the capture length is more than the specified length. The length can be 68 through 10000 bytes. The default length is 1514 bytes.
- Enter the maximum number of packets that can be captured.Note:
You can capture 10 through 1,000,000 packets from a device. The default number of packets that are captured is 100.
- Enter the packet capture session time-out limit.Note:
The maximum permissible duration is 20 minutes and the default duration is 10 minutes.
- Enter the maximum size of the packet capture file that
can be captured.
- Click Start Packet Capture.
The packet capture session is initiated for the device. You can click Stop Packet Capture to cancel the session, if required.
Note:The session automatically ends when one of the criteria configured in Advanced Settings is met.
After the session is complete, a link to download the packet capture file is displayed. You can click the link to download and save the file on your local system.
Note:The packet capture file is saved at /var/cache/jboss/sd/dataplane_pcap/.