cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
416
Views
0
Helpful
2
Replies

Packet capture on Secure Network Analytics 7.5.2

Antonio Macia
Level 3
Level 3

Hi,

When I try to run a packet capture on the FC GUI I get this message "Log in to your Manager, and follow the instructions in the Help to generate a packet capture. " If I go to that resource I see a bunch of CLI examples that are no longer usefull since SSH access is restricted on the latest versions. How can I run a packet capture on the GUI?

Thanks

1 Accepted Solution

Accepted Solutions

David Salter
Cisco Employee
Cisco Employee

What version are you using? Looking at 7.5.2, the process is as follows:

1: Log in to the appliance CLI using the sysadmin credentials, click OK in the Login information screen.

DavidSalter_0-1746518349544.png
From the Main Menu select Advanced and click Select

DavidSalter_1-1746518440615.png

From the Advanced menu select Packet Capture and click Select
Set your filter ensuring you set duration and number of packets and click Start

On completion, the success message provides help on accessing the file in addition to the file name.  I note the 'The file is saved in /lancope/var/tcpdump' can be misleading, I'll raise that with the documentation team.

DavidSalter_2-1746518660622.png

The file can be found by logging into the appliance web UI and click Support Browse Files, then click the tcpdump folder.

DavidSalter_3-1746518849642.png

 

The file can then be downloaded by clicking the filename.

DavidSalter_4-1746518986893.png

I will check the help further for any errors, omissions or lack of clarity.


View solution in original post

2 Replies 2

David Salter
Cisco Employee
Cisco Employee

What version are you using? Looking at 7.5.2, the process is as follows:

1: Log in to the appliance CLI using the sysadmin credentials, click OK in the Login information screen.

DavidSalter_0-1746518349544.png
From the Main Menu select Advanced and click Select

DavidSalter_1-1746518440615.png

From the Advanced menu select Packet Capture and click Select
Set your filter ensuring you set duration and number of packets and click Start

On completion, the success message provides help on accessing the file in addition to the file name.  I note the 'The file is saved in /lancope/var/tcpdump' can be misleading, I'll raise that with the documentation team.

DavidSalter_2-1746518660622.png

The file can be found by logging into the appliance web UI and click Support Browse Files, then click the tcpdump folder.

DavidSalter_3-1746518849642.png

 

The file can then be downloaded by clicking the filename.

DavidSalter_4-1746518986893.png

I will check the help further for any errors, omissions or lack of clarity.


Antonio Macia
Level 3
Level 3

Thanks @David Salter