Building Blocks for a Custom Packet Capture
The following table describes the components of the page
that you use to configure packet captures, enable packet capture,
and to download packet capture files.
Monitor
Packet Capture

Custom Packet Capture Building Blocks | Configured In | Description |
---|---|---|
Manage Filters | Configure Filtering | When enabling custom packet captures, you should
define filters so that only the packets that match the filters are
captured. This will make it easier to locate the information you
need in the pcaps and will reduce the processing power required by
the firewall to perform the packet capture. Click Add to
add a new filter and configure the following fields:
|
Filtering | Configure Filtering | After defining filters, set the Filtering to ON .
If filtering is OFF , then all traffic is captured. |
Pre-Parse Match | Configure Filtering | This option is for advanced troubleshooting purposes.
After a packet enters the ingress port, it proceeds through several
processing steps before it is parsed for matches against pre‑configured filters. It
is possible for a packet, due to a failure, to not reach the filtering
stage. This can occur, for example, if a route lookup fails. Set
the Pre-Parse Match setting to ON to
emulate a positive match for every packet entering the system. This allows
the firewall to capture packets that do not reach the filtering
process. If a packet is able to reach the filtering stage, it is
then processed according to the filter configuration and discarded
if it fails to meet filtering criteria. |
Packet Capture | Configure Capturing | Click the toggle switch to turn packet capture ON or OFF .You
must select at least one capture stage. Click Add and
specify the following:
|
Captured Files | Captured Files | Contains a list of custom packet captures previously
generated by the firewall. Click a file to download it to your computer.
To delete a packet capture, select the packet capture and then Delete it.
After
you turn on packet capture and then turn it off, you must click
Refresh (
![]() |
Clear All Settings | Settings | Click Clear All Settings to
turn off packet capture and to clear all packet capture settings.This
does not turn off packet capture set in a security profile. For
information on enabling packet capture on a security profile, see Enable
Threat Packet Capture. |
Recommended For You
Recommended Videos
Recommended videos not found.