For details on cookie usage on our site, read our Privacy Policy
Packet Captures issues
- LIVEcommunity
- Discussions
- General Topics
- Packet Captures issues
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
- Mark as New
- Subscribe to RSS Feed
- Permalink
12-29-2021 11:22 PM
Hello Friends
I am trying to take packet captures on my firewall. But in captures I do not see all the packets. What may be the issue? Am I missing anything?
Accepted Solutions
- Mark as New
- Subscribe to RSS Feed
- Permalink
12-30-2021 04:52 AM - edited 12-30-2021 04:54 AM
Hi @d.spider ,
As you said you are not seeing all the packets in the capture, can you confirm what type of filter you have kept for the capture?
- Mark as New
- Subscribe to RSS Feed
- Permalink
12-30-2021 12:00 AM
Thank you for post @d.spider
the first thing I would suspect is session offloading:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CldYCAS
Kind Regards
Pavel
- Mark as New
- Subscribe to RSS Feed
- Permalink
12-30-2021 03:20 AM
Hi @PavelK ,
Thanks for your response.
Is that applicable to all firewall models? I see specific platforms in the article and mine is not listed there (PA 800 series).
- Mark as New
- Subscribe to RSS Feed
- Permalink
12-30-2021 04:52 AM - edited 12-30-2021 04:54 AM
Hi @d.spider ,
As you said you are not seeing all the packets in the capture, can you confirm what type of filter you have kept for the capture?
- Mark as New
- Subscribe to RSS Feed
- Permalink
12-30-2021 08:54 PM
That’s a great point Sutare. Let me verify it as it was not set by me.
- XFF: For security Policy in General Topics
- PPPOE authentication with Plusnet FTTP not working in Next-Generation Firewall Discussions
- Issues with sending Email Updates from Palo Alto Firewall in General Topics
- Users are being disconnected from GlobalProtect VPN in GlobalProtect Discussions
- Zoom not working on Lenovo Laptops with split tunnel enabled for Global Protect in GlobalProtect Discussions
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
