Obtaining a packet capture on a VAP running Proventia Network IPS requires you to run a non-default tcpdump.The customer needs to perform a tcpdump on an ISS VAP but cannot obtain any useful information with the standard tcpdump command.
The default tcpdump doesn't work for the circuits bridged by the ISS application.
/etc/iss/usr/sbin/tcpdump -i provg_1
alias tcpdump='/etc/iss/usr/sbin/tcpdump -i provg_1'
/usr/sbin/tcpdump -i <management_circuit_device_name>
PS.: Running ISS tcpdump on a production envionment can cause performance degradation.