McAfee SG310 Administration Manual page 362

System menu features
Diagnostics menu
Capturing and displaying packets
From the System menu, click Diagnostics > Packet Capture. The Packet Capture page appears
1
(Figure 377).
Figure 377 Packet Capture page
Select the interface on which you want to capture packets from the Interface list.
2
[Optional] Adjust the packet size if necessary in the Options field. The default packet capture size is 1500
3
bytes, and is entered as -s 1500. This guarantees that the packet is fully captured and can be fully
decoded. However, for large packet captures, this size will quickly consume the temporary storage
available on the appliance. For further information on temporary storage space, see
page 357. For large packet captures, decrease this value.
Click Add. The packet capture configuration is added to the Index list
4
Figure 378 Packet Capture added and indexed
Click the checkbox next to the definition Index number to enable the packet capture.
5
Perform the network operation that you which to capture.
6
Disable the packet capture by clicking on the checkbox again.
7
Select the packet capture configuration you want to display from the Index list.
8
[Optional] If desired, adjust the default display options in the Options field. The default packet display
9
option is '-n', which disables DNS lookups for IP addresses. For some examples, see
Click Display to decode and display the packets in the Packet Capture page
10
362 McAfee UTM Firewall 4.0.4 Administration Guide
Table 38 on
(Figure 378).
More filtering
(Figure 379).
options.