Juniper Networks J-Series manual Verifying Captured Packets

J-series™ Services Router Administration Guide

}

Meaning Verify that the output shows the intended file configuration for capturing packets.

Related Topics For more information about the format of a configuration file, see the information about viewing configuration text in the J-series Services Router Basic LAN and WAN Access Configuration Guide.

Displaying a Firewall Filter for Packet Capture Configuration

Purpose Verify the firewall filter for packet capture configuration.

Action From the J-Web interface, select

Configuration>View and Edit>View Configuration Text. Alternatively, from configuration mode in the CLI, enter the show firewall filter dest-allcommand.

[edit]

user@host# show firewall filter dest-all term dest-term {

from {

destination-address 192.168.1.1/32;

}

then { sample; accept;

}

}

Meaning Verify that the output shows the intended configuration of the firewall filter for capturing packets sent to the destination address 192.168.1.1/32.

Related Topics For more information about the format of a configuration file, see the information about viewing configuration text in the J-series Services Router Basic LAN and WAN Access Configuration Guide.

Verifying Captured Packets

Purpose Verify that the packet capture file is stored under the /var/tmp directory and the packets can be analyzed offline.

Action Take the following actions:

■Disable packet capture. See “Disabling Packet Capture” on page 261.

■Perform these steps to transfer a packet capture file (for example, 126b.fe-0.0.1), to a server where you have installed packet analyzer tools (for example, tools-server), using FTP.

1. From the CLI configuration mode, connect to tools-serverusing FTP:

user@host# run ftp tools-server Connected to tools-server.mydomain.net

220 tools-server.mydomain.net FTP server (Version 6.00LS) ready

264■ Displaying a Firewall Filter for Packet Capture Configuration