You are troubleshooting a HTTP connection problem. You’ve started fw monitor -o
http.pcap. When you open http.pcap with Wireshark there is only one line. What is the most
likely reason?
A.
Acceleration was turned on and therefore fw monitor sees only SYN.
B.
fw monitor was restricted to the wrong interface.
C.
Like SmartView Tracker only the first packet of a connection will be captured by fw
monitor.
D.
By default only SYN pakets are captured.