Setting rolling packet capture with increased size limit on EdgeSWG

Products

• Advanced Secure Gateway Software - ASG
• ProxySG Software - SGOS
• ISG Proxy

Issue/Introduction

As of SGOS 6.5.2.1, a packet capture can be set to exceed the previous hard coded maximum capacity of 100MB. The default packet capture file size is still 100MB. Increasing the capacity of the capture file is done manually each time and cannot be set to automatically capture more than the default for future captures. The following instructions will show how to increase the maximum capacity of the packet capture file.

 

Resolution

1. In the EdgeSWG management console, go to Administration>Packet Captures (in Service Information tile), and click the Start Capture... button.
2. In the Start Packet Capture dialog box, select "Selected" (box) beside "Packets to capture:"
3. Select Capture "last" (dropdown)
4. Select Matching "kbytes" and enter the value of 4000000 in the empty field. 
5. Click the Start Capture button.

   



Note: An expected error window will display. This message will let you know the maximum packet capture file size the EdgeSWG will accept. 

   

Use the maximum value of the capsize you received in the error if wanting to obtain the largest packet capture file possible. Otherwise, enter a lesser value as needed. 

Click "Start Capture..." again and alter the value when the dialog box appear.

Review steps 1 - 4 again but enter a value no greater than the max capsize value you received in the error on step 4. 

Once "Start Capture" is clicked, you'll see "Capture in Progress" status in the UI".

Click "Stop And Download" once you are done simulating the issue and download the PCAP file.