Are there any applications that web-browsing, ping are not offload?

John_Lee — Mon, 23 Nov 2015 02:48:02 GMT

Hello

I am considering of turning off offload at PA due to packet capture.

I read one of documents about session in comunnity site.

web-browsing, ping are not offload.. so I don't need to do command line [offload no] If I want to do pcap to inspect detail logs about that

Could you give me who has non offload applications lists?

Thank you

Re: Are there any applications that web-browsing, ping are not offload?

reaper — Mon, 23 Nov 2015 08:50:09 GMT

Hi John

It's recommended to only toggle offloading off/on for a very short time during troubleshooting efforts when so required, it is not recommended to permanently disable offloading.

any non-tcp/udp sessions are not offloaded and also applications that have a very high morphology will not be offloaded so that AppID can keep inspecting the application behavior. Very short sessions, like DNS, will also not be offloaded

as a troubleshooting procedure you could add a step to disable/enable offloading just to ensure all data is captured

> set filters

> enable filtering

> set capture parameters

> disable offloading

> clear sessions (any sessions active before the filter is enabled will also not be captured)

> start capture

> stop capture

> enable offloading

hope this helps

Tom

topic Re: Are there any applications that web-browsing, ping are not offload? in General Topics

Are there any applications that web-browsing, ping are not offload?

Re: Are there any applications that web-browsing, ping are not offload?