Packet capture
Available inCommunityCloudEnterprise
Handler type: pcap
Example of policy with input pcap and handler PCAP
handlers:
window_config:
deep_sample_rate: 100
num_periods: 8
modules:
default_pcap:
type: pcap
config:
topn_count: 25
input:
input_type: pcap
tap: default_pcap
filter:
bpf: net 192.168.1.0/24
config:
iface: wlo1
host_spec: 192.168.1.0/24
pcap_source: libpcap
debug: true
kind: collectionMetrics Group
-
No metrics group available.
Filters
- No filters available.
Configurations
- Abstract configurations.
recorded_stream. Marks the stream as a recording rather than live traffic. Presence-based: setting it tofalsestill enables it, so omit the key to disable.