Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Configure Packet Capture

While configuring packet capture, remember the following:

  • Packet capture automatically stops after a duration of six hours. During this period, all data captured is saved for analysis or record-keeping.

  • You can store up to 20 packet capture files. If you need to generate new ones, delete some of the existing files first.

  • A maximum of 5 packet capture operations can be in progress simultaneously.

  • Multiple tenants can initiate packet capture independently and run multiple packet capture sessions in parallel across different tenants.

To configure packet capture on a device:

  1. Click Monitor > Packet Capture.
    The Packet Capture page is displayed.
  2. Click Capture Packet.
    The Capture Packet page is displayed.
  3. Enter the details according to the guidelines provided in Table 1.
  4. Click Start to start capturing data packets for the selected device.
    A success message is displayed with a Job ID link. Click the Job ID to view the status of the job on the Jobs page.

    • You can view the packet capture file status on the Packet Capture page. Click Stop Packet Capture to cancel the session.

    • After the job is successful, a link to download the packet capture file is displayed on the user interface. Click the Download PCAP File link to download and save the file on your local machine. Open the .pcap file using a network packet analyzer.

    Table 1: Capture Packet Parameters
    Field Description

    Device

    Select the device to capture and analyze the data plane traffic.

    Basic Filter

    Protocol

    Select the protocol to capture the packets.

    Interface

    Select the logical interface of the device.

    Source & Destination Filter

    Bidirectional

    Enable the toggle switch to collect information, such as traffic from source port to destination port and vice versa.

    Source Port

    Enter the source port number between 0 through 65535.

    Source Prefix

    Enter the source IPv4 or IPv6 address prefix.

    Destination Port

    Enter the destination port number between 0 through 65535.

    Destination Prefix

    Enter the destination IPv4 or IPv6 address prefix.

    Additional Settings

    Max File Size

    Enter the maximum size of the packet capture file. You can capture from 1 MB to 20 MB of data in a file. The default value is 1 MB.

    Max Capture Size

    Enter the maximum length of the packet capture file after which it is truncated. You can enter a value between 68 through 10,000 bytes. The default value is 1514 bytes.

    Packet Limit

    Enter the number of packets that can be captured in a session. You can capture between 10 through 1 million packets in a session. The default value is 100 packets.

Related Documentation