paloaltonetworks:troubleshooting:packet_captures
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| paloaltonetworks:troubleshooting:packet_captures [2022/01/27 22:53] – [Packet Capture IP Style] bstafford | paloaltonetworks:troubleshooting:packet_captures [2022/11/23 12:49] (current) – external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 6: | Line 6: | ||
| * TX - Post-decryption, | * TX - Post-decryption, | ||
| * DR - Dropped packets | * DR - Dropped packets | ||
| + | |||
| + | Putting RX and TX into the same file will, if NAT is involved, result in the packet capture putting both the pre-NAT packet and the post-NAT packet in the PCAP. Including the FW stream will result in duplicate errors as it will clash with RX. | ||
| I've seen drops recorded when a packet was tranmisted and then a routing loop pushed the packet straight back at the firewall. So the packet was shown in TX and DR. | I've seen drops recorded when a packet was tranmisted and then a routing loop pushed the packet straight back at the firewall. So the packet was shown in TX and DR. | ||
paloaltonetworks/troubleshooting/packet_captures.1643324008.txt.gz · Last modified: (external edit)