How to export packet captures from the CLI
9365
Created On 10/02/23 14:35 PM - Last Modified 05/10/24 02:09 AM
Objective
This article explains how to export a packet capture from the Command Line Interface of a firewall or Panorama as an alterative to the Graphical User Interface.
Environment
- Panorama
- Palo Alto Firewall
- Packet capture
Procedure
- Use one of the following commands to export the different stages of packet capture files:
scp export filter-pcap from <capture> to <username@host:path>
tftp export filter-pcap from <capture> to <tftp host>
- To upload the files directly to a technical support case, use the command below:
scp export filter-pcap from <capture> to xxxxxxxx@tacupload.paloaltonetworks.com:./
Note: xxxxxxxx will be the support case number, including leading zeros. When prompted, the password will be the email address under which the case was opened.
Additional Information
Getting Started: Packet Capture
How To Packet Capture (tcpdump) On Management Interface