Downloading a PCAP from a Management Center device

Products

• Management Center
• Symantec

Issue/Introduction

Management Center (MC) allows you to run a packet capture from the devices CLI via the pcap command

Environment

Management Center 2.x and 3.x

 

Resolution

The easiest way to download the pcap once it has been created is via the GUI.

Browse to Administration -> Logs

and you should see the pcap_dump_file as shown in the picture below.

select the file and click on "Download".  This pcap file can be viewed using Wireshark

Note: If there is no pcap_dump_file visible in the Logs list the packet capture did not record and packets. The pcap_error does not contain viewable traffic data.

Additional Information

For more information, kindly refer to Management Center documentation