ZyXEL Communications ZyWALL 1100 User Manual page 689

Table 300 Maintenance > Diagnostics > Packet Capture (continued)
LABEL
Host Port
Continuously capture
and overwrite old ones
Save data to onboard
storage only
Save data to USB
storage
Captured Packet Files
Split threshold
Duration
File Suffix
Number Of Bytes To
Capture (Per Packet)
Chapter 37 Diagnostics
DESCRIPTION
This field is configurable when you set the IP Type to any, tcp, or udp. Specify the
port number of traffic to capture.
Select this to have the ZyWALL/USG keep capturing traffic and overwriting old
packet capture entries when the available storage space runs out.
Select this to have the ZyWALL/USG only store packet capture entries on the
ZyWALL/USG. The available storage size is displayed as well.
Note: The ZyWALL/USGL reserves some onboard storage space as a buffer.
Select this to have the ZyWALL/USG store packet capture entries only on a USB
storage device connected to the ZyWALL/USG if the ZyWALL/USG allows this.
Status:
Unused - the connected USB storage device was manually unmounted by using the
Remove Now button or for some reason the ZyWALL/USG cannot mount it.
none - no USB storage device is connected.
service deactivated - USB storage feature is disabled (in Configuration >
Object > USB Storage), so the ZyWALL/USG cannot use a connected USB device
to store system logs and other diagnostic information.
available - you can have the ZyWALL/USG use the USB storage device. The
available storage capacity also displays.
Note: The ZyWALL/USG reserves some USB storage space as a buffer.
When saving packet captures only to the ZyWALL/USG's onboard storage, specify a
maximum limit in megabytes for the total combined size of all the capture files on
the ZyWALL/USG.
When saving packet captures to a connected USB storage device, specify a
maximum limit in megabytes for each capture file.
Note: If you have existing capture files and have not selected the Continuously
capture and overwrite old ones option, you may need to set this size larger
or delete existing capture files.
The valid range depends on the available onboard/USB storage size. The ZyWALL/
USG stops the capture and generates the capture file when either the file reaches
this size or the time period specified in the Duration field expires.
Specify a maximum size limit in megabytes for individual packet capture files. After
a packet capture file reaches this size, the ZyWALL/USG starts another packet
capture file.
Set a time limit in seconds for the capture. The ZyWALL/USG stops the capture and
generates the capture file when either this period of time has passed or the file
reaches the size specified in the File Size field. 0 means there is no time limit.
Specify text to add to the end of the file name (before the dot and filename
extension) to help you identify the packet capture files. Modifying the file suffix also
avoids making new capture files that overwrite existing files of the same name.
The file name format is "interface name-file suffix.cap", for example "vlan2-packet-
capture.cap".
Specify the maximum number of bytes to capture per packet. The ZyWALL/USG
automatically truncates packets that exceed this size. As a result, when you view
the packet capture files in a packet analyzer, the actual size of the packets may be
larger than the size of captured packets.
ZyWALL/USG Series User's Guide
689