Packet Capture is a way of setting up a monitoring point to copy and store IP packets. A monitoring point captures packets based on user-defined parameters that include which packets to capture, how much of each packet to capture, and when to stop capturing.

A monitoring point can only capture based on one set of parameters at any given time. Packets from monitoring, assessments, diagnostic tests, and monitoring point communication are never captured.

The packets are packaged into a standard file format and securely uploaded to AppNeta Performance Manager (APM). You can explore the results there, or download the file to analyze using third-party software.

Prerequisites

Make sure your monitoring point is positioned and cabled to analyze inbound and outbound traffic on your network.

Set up a monitoring point now….

Passphrase

Set the passphrase that will be used to keep your packet captures secure—you cannot use Packet Capture until you set the passphrase.

Set the passphrase now…

Start a capture

To start a new capture:

  1. Navigate to Usage > Packet Capture.
  2. Click ‘+ start new capture’.
  3. See this page for help with capture options.

—OR—

To use an existing capture as a template:

  1. Navigate to Usage > Packet Capture.
  2. Select 50x50_trans.png > Start Again.

Stop a capture

Capturing can stop automatically because of a top condition in the capture config, or you can stop it manually from 50x50_trans.png > Stop.

Captures are capped at 1GB or 1 million packets, which ever comes first, on all device models. In addition, regardless of any stop conditions, capturing stops when the space remaining on the monitoring point is too low:

Full-packet
1500 bytes are captured. Capturing stops when less than 10MB remains on the device.
Partial-packet
Less than 1500 bytes are captured. Capturing stops when less than 1MB remains on the device.

Next steps

Explore
APM uses a few popular Wireshark filters to provide in-app alert and warning statistics.
Download
Packet captures are packaged as a gzip compressed .pcap file, delivery format supported by Wireshark.
Schedule
Trigger a series of periodic packet captures. Specify the number of captures, the repeat interval, and when the first capture starts.