Chapter 48 Diagnostics

The following table describes the labels in this screen.

Table 238 Maintenance > Diagnostics > Packet Capture

LABEL

DESCRIPTION

Interfaces

Enabled interfaces (except for virtual interfaces) appear under

 

Available Interfaces. Select interfaces for which to capture

 

packets and click the right arrow button to move them to the

 

Capture Interfaces list. Use the [Shift] and/or [Ctrl] key to select

 

multiple objects.

 

 

IP Type

Select the protocol of traffic for which to capture packets. Select

 

any to capture packets for all types of traffic.

 

 

Host IP

Select a host IP address object for which to capture packets. Select

 

any to capture packets for all hosts. Select User Defined to be

 

able to enter an IP address.

 

 

Host Port

This field is configurable when you set the IP Type to any, tcp, or

 

udp. Specify the port number of traffic to capture.

 

 

File Size

Specify a maximum size limit in kilobytes for the total combined

 

size of all the capture files on the ZyWALL, including any existing

 

capture files and any new capture files you generate.

 

Note: If you have existing capture files you may need to set

 

this size larger or delete existing capture files.

 

The valid range is 1 to 10000. The ZyWALL stops the capture and

 

generates the capture file when either the file reaches this size or

 

the time period specified in the Duration field expires.

 

 

Duration

Set a time limit in seconds for the capture. The ZyWALL stops the

 

capture and generates the capture file when either this period of

 

time has passed or the file reaches the size specified in the File

 

Size field. 0 means there is no time limit.

 

 

File Suffix

Specify text to add to the end of the file name (before the dot and

 

filename extension) to help you identify the packet capture files.

 

Modifying the file suffix also avoids making new capture files that

 

overwrite existing files of the same name.

 

The file name format is “interface name-file suffix.cap”, for

 

example “vlan2-packet-capture.cap”.

 

 

Number Of Bytes To

Specify the maximum number of bytes to capture per packet. The

Capture (Per Packet)

ZyWALL automatically truncates packets that exceed this size. As a

 

result, when you view the packet capture files in a packet analyzer,

 

the actual size of the packets may be larger than the size of

 

captured packets.

 

751

ZyWALL USG 50 User’s Guide