When we do session offload then PCAP can not capture the session offload traffic .
if i am also doing flow basic on that then flow basic will not be impacted by session offload?
Solved! Go to Solution.
Correct. A flow basic will not be able to capture any traffic if it has been offloaded so if you're wanting to do a flow basic for any SSL traffic, for example, then it is important to disable session offloading for the duration of your capture/testing.
Disabling session offloading is a global setting and will add some additional overhead processing to the dataplane so it is important to remember not to run a flow basic if the dataplane CPU is high. The traffic itself will not be impacted by session offloading being disabled. Other important factors to remember are:
- Always apply filters when doing any sort of traffic capturing
- Do not attempt to modify the filters whilst logging is enabled; first, disable logging then modify your filters.
One last thing if i enable PCAP filters and do session offload will it offload only sessions filterd in pcap
or it will offload all the traffic?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!