ZyXEL ZYWALL USG 100 User Guide - Page 133
Example of Viewing a Packet Capture (CAP) File, Dashboard, Maintenance, Diagnostics
View all ZyXEL ZYWALL USG 100 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 133 highlights
Chapter 6 Maintenance The ZyWALL uses the flash space to store packet capture files. Once the flash is full, the ZyWALL stops generating the file or has new captured packets override old packets depending on your setting. If your ZyWALL's flash is full or the size of the packet capture files you want to capture may exceed the remaining space, you can use a USB storage device. Note: You can check the remaining flash space in the Dashboard or Maintenance > Diagnostics > Packet Capture screen. To save packet capture files to a connected USB storage device, do the following: 1 Insert a USB storage device to any USB port on your ZyWALL. In the Monitor > System Status > USB Storage screen, make sure the USB device's file system doesn't display "Unknown". 2 Go to Configuration > System > USB Storage, select Activate USB storage service and click Apply. 3 In the Maintenance > Diagnostics > Packet Capture > Collect screen, select Save data to USB storage. 6.9.1 Example of Viewing a Packet Capture (CAP) File Here is an example of a packet capture file viewed in the Wireshark packet analyzer. Notice that the size of frame 15 on the wire is 1514 bytes while the captured size is only 1500 bytes. The ZyWALL truncated the frame because the capture screen's Number Of Bytes To Capture (Per Packet) field was set to 1500 bytes. ZyWALL USG100-PLUS User's Guide 133