Capture module: Difference between revisions

Line 234: Line 234:




* Packet ring buffer
:If multiple packet ring buffer clusters are active this dropdown menu allows to choose from which cluster the packets should be captured.




Line 247: Line 249:
:''' – Disk'''
:''' – Disk'''
:This method is only visible if a storage device is active and has some amount of free storage space. The capture will create a PCAP file on the storage device.
:This method is only visible if a storage device is active and has some amount of free storage space. The capture will create a PCAP file on the storage device.
:If PCAP export via SFTP is enabled, an additional checkbox is displayed to store the capture file in the export directory, slated for upload according the SFTP export settings.




Line 298: Line 301:
:'''– Omit interface ID:''' Enabling this option will generate a PCAP file that only contains a single interface and treats all packets as if they arrived on that interface. This may improve compatibility with third party software that cannot handle PCAPs with multiple interfaces IDs.
:'''– Omit interface ID:''' Enabling this option will generate a PCAP file that only contains a single interface and treats all packets as if they arrived on that interface. This may improve compatibility with third party software that cannot handle PCAPs with multiple interfaces IDs.
:After pushing the '''Start capture''' button, the capture starts.
:After pushing the '''Start capture''' button, the capture starts.


==== Webshark ====
==== Webshark ====
547

edits