Filter
Top Products
System > Packet Capture
109
SonicOS Enhanced 4.0 Administrator Guide
Starting packet capture
Step 1 Navigate to the Packet Capture page in the UI. See “Accessing Packet Capture in the UI” on
page 108.
Step 2 Under Packet Capture, optionally click Reset. The Packet Capture page displays several lines
of statistics above the Start and Stop buttons. You can click Reset to set the statistics back to
zero.
Step 3 Under Packet Capture, click Start.
Step 4 To refresh the packet display windows to show new buffer data, click Refresh.
You can view the captured packets in the Captured Packets, Packet Detail, and Hex Dump
sections of the screen. See “Viewing the captured packets” on page 109.
Stopping packet capture
Step 1 Navigate to the Packet Capture page in the UI. See “Accessing Packet Capture in the UI” on
page 108.
Step 2 Under Packet Capture, click Stop.
Viewing the captured packets
The UI provides three windows to display different views of the captured packets. The following
sections describe the viewing windows:
• “About the Captured Packets Window” on page 109
• “About the Packet Detail Window” on page 111
• “About the Hex Dump Window” on page 111
About the Captured Packets Window
The Captured Packets window displays the following statistics about each packet:
• # - The packet number relative to the start of the capture
• Time - The date and time that the packet was captured
• Ingress - The SonicWALL appliance interface on which the packet arrived is marked with
an asterisk (*). The subsystem type abbreviation is shown in parentheses. Subsystem type
abbreviations are defined in the following table.
Abbreviation Definition
i Interface
hc Hardware based encryption or decryption
sc Software based encryption or decryption
mMulticast
r Packet reassembly
sSystem stack
ip IP helper
f Fragmentation