— Exhibit —
user@srx# show security datapath-debug
capture-file pkt-cap-file format pcap size 5m;
action-profile {
pkt-cap-profile {
event np-ingress {
packet-dump;
}
}
}
packet-filter pkt-filter {action-profile pkt-capture;
source-prefix 1.2.3.4/32;
}
— Exhibit —
You want to capture transit traffic passing through your SRX3600. You add the configuration shown in the
exhibit but do not see entries added to the capture file.
What is causing the problem?
A.
You are missing the configuration set security datapath-debug maximum-capture-size 1500.
B.
You are missing the configuration set security datapath-debug packet-filter pkt-filter destination-prefix
5.6.7.8/32.
C.
You must start the capture from operational mode with the command request security datapath-debug
capture start.
D.
You must start the capture from operational mode with the command monitor start capture.