How to do packet captures using the CLI CloudGenix?
26986
Created On 11/02/20 18:55 PM - Last Modified 02/23/23 23:50 PM
Question
How to do packet captures using the CLI CloudGenix?
Environment
CloudGenix
Device Toolkit
Answer
- Use the tcpdump command to capture;
tcpdump interface args=” “ show
- Saving Packet Capture to a File
tcpdump interface args=” “ show | save filename
- Viewing and Exporting a .pcap File
# file view sample.pcap
Additional Information
- For instance to use source IP and destination IP as filters, the syntax will be:
tcpdump 4 args=“host 1.1.1.1 and host 2.2.2.2” show
- We can also use protocol as a filter
tcpdump 4 args=“esp” show
- Protocol, source IP and destination IP
tcpdump any args="esp and host 192.168.50.1 and host 192.168.50.2" showFor more information please check
https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/prisma-sd-wan-ion-cli-reference/use-cli-commands/debug-commands/tcp-dump