What is Packet Capture? - SonicWALL

Verifying Packet Capture Activity
Verifying Packet Capture Activity
This section describes how to tell if your packet capture is working correctly according to the configuration.
It contains the following sections:
• “Understanding Status Indicators” section on page 19
• “Resetting the Status Information” section on page 20
Understanding Status Indicators
The main Packet Capture screen displays status indicators for packet capture and FTP logging. The packet
capture status indicator shows one of the following three conditions:
• Red: Capture is stopped
• Green: Capture is running and the buffer is not full
• Orange: Capture is running, but the buffer is full
Figure 12
Main Packet Capture Window
The UI also displays the buffer size, the number of packets captured, the percentage of buffer space used,
and how much of the buffer has been lost. Lost packets occur when automatic FTP logging is turned on,
but the file transfer is slow for some reason. If the transfer is not finished by the time the buffer is full again,
the data in the newly filled buffer is lost.
Note
Although the buffer wrap option clears the buffer upon wrapping to the beginning, this
is not considered lost data.
SonicOS Enhanced Packet Capture
19