Refer to the Exhibit.
— Exhibit —
user@srx# show security datapath-debug
capture-file pkt-cap-file format pcap size 5m;
action-profile {
pkt-cap-profile {
event np-ingress {
packet-dump;
}
}
}
packet-filter pkt-filter {
action-profile pkt-capture;
source-prefix 1.2.3.4/32;
}
— Exhibit —
You want to capture transit traffic passing through your SRX3600. You add the configuration
shown in the exhibit but do not see entries added to the capture file.
What is causing the problem?
A.
You are missing the configuration set security datapath-debug maximum-capture-size 1500.
B.
You are missing the configuration set security datapath-debug packet-filter pkt-filter destinationprefix 5.6.7.8/32.
C.
You must start the capture from operational mode with the command request security datapathdebug capture start.
D.
You must start the capture from operational mode with the command monitor start capture.
Explanation:
Capture does not start by itself; you must manually start it.
To start the debug:
user@host> request security datapath-debug capture start
To stop the debug:
user@host> request security datapath-debug capture stop
http://kb.juniper.net/InfoCenter/index?page=content&id=KB21563