What is Packet Capture? - SonicWALL

Configuring Packet Capture
Note
If a field is left blank, no filtering is done on that field. Packets are captured without regard
to the value contained in that field of their headers.
Step 1
Step 2
Step 3
Navigate to the Packet Capture page in the UI.
See “Accessing Packet Capture in the UI” on page 5.
Under Packet Capture, click Configure.
In the Packet Capture Configuration window, click the Capture Filter tab.
Figure 8
Capture Filter Window
Step 4
Step 5
Step 6
Step 7
Step 8
Step 9
Step 10
In the Interface Name(s) box, type the SonicWALL appliance interfaces on which to capture packets, or
use the negative format (!X0) to capture packets from all interfaces except those specified. To capture on all
interfaces, leave blank.
In the Ether Type(s) box, enter the Ethernet types for which you want to capture packets, or use the
negative format (!ARP) to capture packets from all Ethernet types except those specified. To capture all
Ethernet types, leave blank.
In the IP Type(s) box, enter the IP packet types for which you want to capture packets, or use the negative
format (!UDP) to capture packets from all IP types except those specified. To capture all IP types, leave
blank.
In the Source IP Address(es) box, type the IP addresses from which you want to capture packets, or use
the negative format (!10.1.2.3) to capture packets from all source addresses except those specified. To
capture packets from all source addresses, leave blank.
In the Source Port(s) box, type the port numbers from which you want to capture packets, or use the
negative format (!25) to capture packets from all source ports except those specified. To capture packets
from all source ports, leave blank.
In the Destination IP Address(es) box, type the IP addresses for which you want to capture packets, or
use the negative format (!10.1.2.3) to capture packets with all destination addresses except those specified.
To capture packets for all destination addresses, leave blank.
In the Destination Port(s) box, type the port numbers for which you want to capture packets, or use the
negative format (!80) to capture packets with all destination ports except those specified. To capture packets
for all destination ports, leave blank.
12 SonicOS Enhanced Packet Capture