No packet capture files are generated on pa-3060 that customers are using.

cancel
Showing results for 
Search instead for 
Did you mean: 

No packet capture files are generated on pa-3060 that customers are using.

L1 Bithead

capture01.PNG

 

Hello.

I have been contacted by a customer that there is a problem with packet capture.

I know that executing a packet capture command triggers packet capture, and generating a pcap file containing captured packets is generated when the traffic you want to check is generated.

However, looking at the attached screenshot, the customer executed the packet capture command using the desired filter. When we asked the customer, 'Did the packet capture process generate the traffic you want to check?', the customer answered yes.

What causes this problem to occur?

1 REPLY 1

L4 Transporter

Thank you for posting question @MinSeob-KWON

 

The packet capture in your screen shot is for traffic on management interface. Sorry for asking silly question, but is it possible that this customer actually wanted to capture traffic on data plane interface: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClTJCA0

 

If this traffic is really supposed to go over management interface, then as next thing, I would check whether the customer has configured any service routes by going to: Device > Setup > Service Route Configuration. If non management interface is configured, then you will not be able to see this traffic on management interface.

 

Kind Regards

Pavel

 

 

Pavel Kucera
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!