- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
06-20-2011 10:59 AM
From the cli:
adming@pan2020> scp export threat-pcap from 20110619 to root@linuxhost:/root/pcaps
Password: hunter2
/opt/panlogs/session/pan/threat/20110619: not a regular file
admin@pan2020>
Bug? Should I feed it bran or yogurt?
Edit: OS 3.1.8
06-20-2011 02:56 PM
scp export filter-pcap from <filename> to <username>@<ip-addr>:<path-to-file>
typically filename will equal the name of your packet-diag packet capture. To export the threat pcaps you would replace filter-pcap with threat-pcap.
if you hit the tab key after entering 'from' the system should show you the files that are available for export.
-Benjamin
06-20-2011 11:38 AM
try adding *
e.g. from 20110619*
we do not recommend feeding your firewall anything other than AC power and network packets.
-Benjamin
06-20-2011 02:33 PM
No change. 😞
Thanks for the suggestion though.
06-20-2011 02:36 PM
you should be able to export each file individually if you specify the full filename.
06-20-2011 02:45 PM
How would I do that? Pre-pending the path just makes it try to send /opt/panlogs/session/pan/theat//opt/panlogs/session/pan/threat/20110619, which dies with "No such file or directory".
I tried to scp from the Linux host instead, but it just stalls after the password prompt.
Is there some other way to get at any old file with advance knowledge of the path?
06-20-2011 02:56 PM
scp export filter-pcap from <filename> to <username>@<ip-addr>:<path-to-file>
typically filename will equal the name of your packet-diag packet capture. To export the threat pcaps you would replace filter-pcap with threat-pcap.
if you hit the tab key after entering 'from' the system should show you the files that are available for export.
-Benjamin
06-20-2011 03:02 PM
OK, it seems I just wasn't done yet.
20110619 isn't the filename, it's a directory that contains almost 60,000 logs from that day. Swell. :smileylaugh:
Thanks for prodding me in the right direction.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!