how do I get a pcap of threat on PANOS 3.0.x?

[ttongfly]

Dear manager.

I trid to find command on PA using panos 3.0.8 for packet capture of threat but could not. and I couldn't find any information in this community.

I wonder that threat pcap is being used only PANOS 3.1.x? or having a different command?

Thank you.

Regards

Roh.

[swhyte]

If you want to get a pcap of a threat, you can go to the objects tab and then select the threat profile that you want the pcap from.

For example you can go to vulnerabilites and open up the profile that you are currently using on your policies.

Then make sure and select "CUSTOM" from the 'rule type" drop down. You will notice that all vulnerability signatures will be populated. You can then search for the one that you would like or select all of them from the "packet capture" column all the way to the right.

thank you,

Stephen Whyte