SonicWALL TZ 190 Manuale Utente

Pagina di 843
System > Packet Capture
109
SonicOS Enhanced 4.0 Administrator Guide
Starting packet capture
Step 1
Navigate to the Packet Capture page in the UI. See “Accessing Packet Capture in the UI” on 
page 108
.
Step 2
Under Packet Capture, optionally click Reset. The Packet Capture page displays several lines 
of statistics above the Start and Stop buttons. You can click Reset to set the statistics back to 
zero. 
Step 3
Under Packet Capture, click Start.
Step 4
To refresh the packet display windows to show new buffer data, click Refresh.
You can view the captured packets in the Captured Packets, Packet Detail, and Hex Dump 
sections of the screen. See “Viewing the captured packets” on page 109.
Stopping packet capture
Step 1
Navigate to the Packet Capture page in the UI. See “Accessing Packet Capture in the UI” on 
page 108
.
Step 2
Under Packet Capture, click Stop.
Viewing the captured packets
The UI provides three windows to display different views of the captured packets. The following 
sections describe the viewing windows:
  •
  •
  •
About the Captured Packets Window
The Captured Packets window displays the following statistics about each packet:
  •
# - The packet number relative to the start of the capture
  •
Time - The date and time that the packet was captured
  •
Ingress - The SonicWALL appliance interface on which the packet arrived is marked with 
an asterisk (*). The subsystem type abbreviation is shown in parentheses. Subsystem type 
abbreviations are defined in the following table.
Abbreviation
Definition
i
Interface
hc
Hardware based encryption or decryption
sc
Software based encryption or decryption
m
Multicast
r
Packet reassembly
s
System  stack
ip
IP helper
f
Fragmentation