Downloading a PCAP from a Management Center device

Products

• Management Center

Issue/Introduction

In some situations during the troubleshooting there is a need to run packet capture on Management Center.

This can be done through CLI via #pcap command.

• https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/management-center/3-3/index/c_enable_commands/c_pcap.html

 

 

Environment

Management Center 3.x and 4.x

 

Resolution

In modern Management Center (3.x+) versions packet capture can be downloaded via Management Console GUI

• Access Management Center GUI and go to  Administration -> Logs
• Packet capture should be visible as "Packet Capture" Log Type:

 

 

• Select the file and click on "Download"
• Note that if there were multiple packet captures run, these will be included into single ".zip" archive

 

Additional Information

• Documentation: pcap utility