Packet Capture filters not correct

Reply
L1 Bithead

Packet Capture filters not correct

I have a problem once in a while where packet capture filters are not working.  I set up the filters at one point and if I delete the filters and set up a new filter.  Turn packet capture back on and it still gives me captures of the old filter.  I can not figure out how to either clear out the filters or clear out the packet capture files.

Anybody see this before?

Thanks,

  Steve

L7 Applicator

Re: Packet Capture filters not correct

Packet filters will tag sessions to capture.

If you change filters then active sessions keep the tag and are still captured although filter is different.

 

> debug dataplane packet-diag clear filter-marked-session all

 

https://live.paloaltonetworks.com/t5/Management-Articles/Packet-Capture-Contains-Traffic-not-Defined...

Enterprise Architect @ Cloud Carib www.cloudcarib.com
ACE (3.0, 5.0, 6.0, 7.0), PCNSE (6, 7), PCNSI
L6 Presenter

Re: Packet Capture filters not correct

Nice. Never had this before but good to know

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!