topic Re: Packet Capture Mgmt Interface? in General Topics

Packet Capture Mgmt Interface?

mike_cc — Tue, 20 Aug 2013 16:15:44 GMT

Is it possible to packet capture traffic on the management interface using the Monitor->Packet Capture feature?

Mike

Re: Packet Capture Mgmt Interface?

HULK — Tue, 20 Aug 2013 16:32:59 GMT

Hi,

We cannot capture the traffic directly on the management interface but there is a way to capture the management traffic on the device using "service routes" . Service routes are used to send/receive the management traffic of the device from one of the dataplane interfaces instead of the mgmt interface. You configure this option from the device-->setup-->services-->service configuration. Once you do this, the mgmt traffic will take the path of the configured interface rather than the mgmt interface. Now you can capture this interface for analyzing the mgmt traffic.

Please follow below mentioned discussion for more information.

https://live.paloaltonetworks.com/message/4565#4565

https://live.paloaltonetworks.com/message/4496#4496

https://live.paloaltonetworks.com/message/11542#11542

https://live.paloaltonetworks.com/message/17468#17468

Hope it helps.

Thanks