cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
351
Views
0
Helpful
2
Replies
Highlighted
Beginner

Stealthwatch flow collector additional BPF in pcap

Is there any documentation for using the "additional BPF" field from packet capture utility on Stealthwatch Flow Collector.

Trying to find out are there any examples or syntax on how to use this field.

TIA

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

Re: Stealthwatch flow collector additional BPF in pcap

Please go to the online help of web UI. Right side top "?" at Support>Packet Capture.

And click "Configure Settings for capture Operation" > click "Tcpdump Expression".

You will see BPF options.

View solution in original post

2 REPLIES 2
Highlighted
Cisco Employee

Re: Stealthwatch flow collector additional BPF in pcap

Please go to the online help of web UI. Right side top "?" at Support>Packet Capture.

And click "Configure Settings for capture Operation" > click "Tcpdump Expression".

You will see BPF options.

View solution in original post

Highlighted
Beginner

Re: Stealthwatch flow collector additional BPF in pcap

Thank you :)