Completed CapturesĪfter the capture is completed, the Controller collates data from multiple SEs and formats the data into a pcap file.
![service captur service captur](https://www.nctechimaging.com/wp-content/uploads/2019/10/street-ai-576x576.png)
When a capture is started, the Capture Configuration page displays the progress of the capture. Note: Enabling session key capture is documented in this article Select one of the following options to control the captures for health monitor flows: This is similar to the snaplen option in TCPdump. Size of Packets – Specify the size of the packet, in bytes, to be captured.Number of Packets per Core – Select this option and specify the maximum number of packets to capture in the core.ĭuration – Select this option and specify the time in minutes to run the capture.To specify a subnet, use the following format: 10.1.1.1/24.To specify a list, use a space between each address.The IP addresses can be client or server addresses. Choose Client IP, IP Range, Subnet Mask – Select this option to capture traffic only for the specified IP address, list or range of IP addresses, or subnet.All Traffic – Select this option to capture all traffic.The traffic will be captured on all SEs handling traffic for that virtual service.
![service captur service captur](https://www.nctechimaging.com/wp-content/uploads/2019/10/mac-1-576x394.png)
This capture includes both the client-to-SE and SE-to-server side of the connection.
![service captur service captur](https://i.ytimg.com/vi/fcRroJFrgkU/maxresdefault.jpg)
Note: It is highly recommended to set a limit for the capture. After the capture is completed, the SE will forward the pcap file to the Controller, which aggregates and sorts the client and server data into a single file. The traffic captures will be automatically run on all SEs actively handling traffic for a virtual service. Virtual services may be on a single Service Engine (SE) or scaled out across multiple active SEs. Packet capture in Avi Vantage runs a TCPdump for the designated virtual service or Service Engine and provides complete visibility into the packet transmission.