What are the Packet Capture limits on the SSLV Appliance?

book

Article ID: 167163

calendar_today

Updated On:

Products

SV-3800 SV-2800 SV-1800

Issue/Introduction

If the disk utilization on the SSLVA is <= 45% the maximum size a packet capture folder can get is 4 GigaBytes. The packet capture folder will contain multiple .pcap files each growing to a maximum size of 32 MegaBytes. The SSLVA will only keep the last 4GB's so when that limit is reached it will delete the oldest file and create a new one.

For example if multiple interfaces are selected the files will be named as follows:

capture_01.0000.pcap
capture_01.0001.pcap
capture_01.0002.pcap

capture_02.0000.pcap
capture_02.0001.pcap
capture_02.0002.pcap

Currently there are no packet capture expressions available to filter the data so the files can grow very quickly. For the steps to run a packet capture please see FAQ2859.