SonicOS 7.0 Tools & Monitors

Using Packet Monitor > Configuring Packet Monitor > Configuring General Settings > Configuring Logging Settings
Table of Contents

Configuring Logging Settings

This section describes how to configure Packet Monitor logging settings. These settings provide a way to configure automatic logging of the capture buffer to an external FTP server. When the buffer fills up, the packets are transferred to the FTP server. The capture continues without interruption.

If you configure automatic FTP logging, this supersedes the setting for wrapping the buffer when full. With automatic FTP logging, the capture buffer is effectively wrapped when full, but you also retain all the data rather than overwriting it each time the buffer wraps.

To configure logging settings

  1. Navigate to the Monitor > Tools & Monitors > Packet Monitor page.
  2. Select the General tab.

  3. Select the Logging tab.

  4. In the FTP Server IP Address box, type the IP address of the FTP server.

    Make sure that the FTP server IP address is reachable by the SonicWall network security appliance. An IP address that is reachable only through a VPN tunnel is not supported.

  5. In the Login ID box, type the login name that the SonicWall network security appliance should use to connect to the FTP server.
  6. In the Password box, type the password that the SonicWall network security appliance should use to connect to the FTP server.

  7. In the Directory Path box, type the directory location for the transferred files. The files are written to this location relative to the default FTP root directory.

    For libcap format, files are named packet-log--<>.cap, where the <> contains a run number and date including hour, month, day, and year. For example, packet-log--3-22-08292006.cap.

  8. For HTML format, file names are in the form packet-log_h-<>.html. For example, an HTML file name is: packet-log_h-3-22-08292006.html.
  9. Select Log To FTP Server Automatically to enable automatic transfer of the capture file to the FTP server when the buffer is full. Files are transferred in both libcap and HTML format.
  10. Select Log HTML File Along With .cap File (FTP) to enable transfer of the file in HTML format as well as libcap format.
  11. Click Log Now to test the connection to the FTP server and transfer the capture buffer contents to it.
  12. For example, packet-log-F-3-22-08292006.cap or packet-log_h-F-3-22-08292006.html.
  13. To save your settings and exit the configuration window, click Save.