All Palo Alto Networks firewalls allow you to take packet
captures (pcaps) of traffic that traverses the management interface
and network interfaces on the firewall. When taking packet captures
on the dataplane, you may need to Disable Hardware Offload to
ensure that the firewall captures all traffic.
Packet capture can be very CPU intensive
and can degrade firewall performance. Only use this feature when
necessary and make sure you turn it off after you have collected
the required packets.