Focus

PAN-OS® and Panorama™API Usage Guide

Export Application PCAPS

Table of Contents

Export Application PCAPS

Application PCAPs are organized by a directory/filename structure where the directory is a date inyyyymmdd format. Filenames for application pcaps use aSourceIP-SourcePort-DestinationIP-DestinationPort-SessionID.pcap format.

Application PCAP Type	API Request
Application PCAP directory list.	curl -X POST 'https://firewall/api?type=export&category=application-pcap"
List of files under a directory using thefrom parameter to indicate date.	curl -X POST 'https://firewall/api?type=export&category=application-pcap&from=<yyyymmdd>"
Application PCAP file by name using thefrom parameter.	curl -X POST 'https://firewall/api?type=export&category=application-pcap&from=<yyyymmdd>/<filename>" The file will be retrieved and saved locally using the name yyyymmdd-filename.
Application PCAP file saved locally with a custom name using theto parameter.	curl -X POST 'https://firewall/api?type=export&category=application-pcap&from=<yyyymmdd>/<filename>&to=<localfile>"

Export Packet Captures

Export Threat, Filter, and Data Filtering PCAPs