The Network Packet Capturing wizard is located on the Administration > Support | Network Packet Capturing tab. Using the captured network packet, administrators or support teams can perform traffic
debug or analysis.
With this feature, administrators can choose a single or multiple network interfaces
on which to simultaneously capture network packet. After the capture starts, the elapsed
time displays. The capture operation stops when the administrator clicks Stop capturing or when the (default) maximum file size of 10GB is reached.
 |
Note
The default maximum file size limitation is configured in /etc/iscan/network.ini.
|
The packet capture for each interface will be save in an individual file using the
naming convention of "capture-{interface}-{date:time}.pcap". For example capture-eth0-20111101:31:31;01.pcap
would be the file name for the packet capture on the eth0 network interface performed
on November 1, 2011.
After the network packet capture completes, all packet capture files are saved in
one compressed package file named to "capture-{date}.tgz". This file displays in the
downloadable list. Administrators can either download or deleted the compressed file.
See also: