Packet Capture filters not correct

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Packet Capture filters not correct

L1 Bithead

I have a problem once in a while where packet capture filters are not working.  I set up the filters at one point and if I delete the filters and set up a new filter.  Turn packet capture back on and it still gives me captures of the old filter.  I can not figure out how to either clear out the filters or clear out the packet capture files.

Anybody see this before?

Thanks,

  Steve

2 REPLIES 2

Cyber Elite
Cyber Elite

Packet filters will tag sessions to capture.

If you change filters then active sessions keep the tag and are still captured although filter is different.

 

> debug dataplane packet-diag clear filter-marked-session all

 

https://live.paloaltonetworks.com/t5/Management-Articles/Packet-Capture-Contains-Traffic-not-Defined...

Enterprise Architect, Security @ Cloud Carib Ltd
Palo Alto Networks certified from 2011

L6 Presenter

Nice. Never had this before but good to know

  • 3304 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!