19216811.liveChapter 48 Diagnostics
ZyWALL USG 50 User’s Guide
751
The following table describes the labels in this screen.
Table 238
Maintenance > Diagnostics > Packet Capture
LABEL
DESCRIPTION
Interfaces
Enabled interfaces (except for virtual interfaces) appear under
Available Interfaces
. Select interfaces for which to capture
packets and click the right arrow button to move them to the
Capture Interfaces
list. Use the [Shift] and/or [Ctrl] key to select
multiple objects.
IP Type
Select the protocol of traffic for which to capture packets. Select
any
to capture packets for all types of traffic.
Host IP
Select a host IP address object for which to capture packets. Select
any
to capture packets for all hosts. Select
User Defined
to be
able to enter an IP address.
Host Port
This field is configurable when you set the
IP Type
to
any
,
tcp
, or
udp
. Specify the port number of traffic to capture.
File Size
Specify a maximum size limit in kilobytes for the total combined
size of all the capture files on the ZyWALL, including any existing
capture files and any new capture files you generate.
Note: If you have existing capture files you may need to set
this size larger or delete existing capture files.
The valid range is 1 to 10000. The ZyWALL stops the capture and
generates the capture file when either the file reaches this size or
the time period specified in the
Duration
field expires.
Duration
Set a time limit in seconds for the capture. The ZyWALL stops the
capture and generates the capture file when either this period of
time has passed or the file reaches the size specified in the
File
Size
field. 0 means there is no time limit.
File Suffix
Specify text to add to the end of the file name (before the dot and
filename extension) to help you identify the packet capture files.
Modifying the file suffix also avoids making new capture files that
overwrite existing files of the same name.
The file name format is “interface name-file suffix.cap”, for
example “vlan2-packet-capture.cap”.
Number Of Bytes To
Capture (Per Packet)
Specify the maximum number of bytes to capture per packet. The
ZyWALL automatically truncates packets that exceed this size. As a
result, when you view the packet capture files in a packet analyzer,
the actual size of the packets may be larger than the size of
captured packets.