https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-count-the-detection-messages-in-the-path-monitor-ping/m-p/563149#M2004 <P>Can the packet capture function of the firewall capture ping detection messages sent from the e1/1 interface?</P> <P>The customer wants to confirm that the wall is sending detection messages normally?</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="微信图片_20231026003256.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/54669i1036A5F136F77556/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="微信图片_20231026003256.png" alt="微信图片_20231026003256.png" /></span></P> <P> </P> Wed, 25 Oct 2023 16:41:26 GMT Felixcao 2023-10-25T16:41:26Z https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-count-the-detection-messages-in-the-path-monitor-ping/m-p/563149#M2004 <P>Can the packet capture function of the firewall capture ping detection messages sent from the e1/1 interface?</P> <P>The customer wants to confirm that the wall is sending detection messages normally?</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="微信图片_20231026003256.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/54669i1036A5F136F77556/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="微信图片_20231026003256.png" alt="微信图片_20231026003256.png" /></span></P> <P> </P> Wed, 25 Oct 2023 16:41:26 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-count-the-detection-messages-in-the-path-monitor-ping/m-p/563149#M2004 Felixcao 2023-10-25T16:41:26Z https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-count-the-detection-messages-in-the-path-monitor-ping/m-p/563183#M2005 <P>Hi <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/76688">@Felixcao</a> ,</P> <P>&nbsp;</P> <P>Yes, it can.&nbsp; Create a filter with one entry:&nbsp; no ingress interface and destination IP used for path monitoring.&nbsp; Capture packets in the transmit stage, and you will capture the ICMP packets.</P> <P>&nbsp;</P> <P>You can also run the CLI command "show high-availability path-monitoring" and you will see the rtt min/max/avg (ms) times.</P> <P>&nbsp;</P> <P>Thanks,</P> <P>&nbsp;</P> <P>Tom</P> Thu, 26 Oct 2023 01:09:15 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/how-to-count-the-detection-messages-in-the-path-monitor-ping/m-p/563183#M2005 TomYoung 2023-10-26T01:09:15Z