Feature #372
closed
Improve packet capturing interface
0%
Description
I would like to suggest a couple of improvements to the packet capturing interface.
Snapshot pfSense-2.0-BETA1-20100217-2217
In general, the packet capturing interface works nicely if capturing a few packages in "real time".
However, if capturing megabytes of packages in the background, the GUI does not work well.
(1)
When opening the Diagnostics -> Package Capture tab, it is not immediately possible to see if a capture is already running.
(2)
When a large number of packages have been captured, and "Download Capture" is pressed, the GUI will try to show all the captured packages.
This will render the GUI non-responsive for a long time, if there are a lot of packages.
I would suggest adding a button called "Show last 100 packages" or "Show last packages" and a field to enter the number of packages to be shown.
(3)
It would be great to have an option to limit the number of captured packages per file like "tcpdump -C".
This should be accompanied by an interface allowing to download either one of the package captures.
Updated by Henrik Kaare Poulsen over 15 years ago
(4)
It would also be great to be able to capture on several interfaces at the same time.
Updated by Jim Pingle about 14 years ago
(1) Should be working properly now.
(3) You can already limit the size of the capture in the GUI using the "Count" field, not sure what else you might be referring to here.
(4) Doesn't appear to be easily possible in FreeBSD, it would require multiple concurrent tcpdumps writing to multiple files. That would require quite a bit of rewriting the GUI to support. Using "any" for an interface is only supported in tcpdump on Linux.
Updated by Jim Pingle over 13 years ago
- Status changed from New to Resolved
Closing this out as I think we've already implemented as much of this as is feasible, and then some. There were some bugs with the page in general that were making things slower that have been fixed, so it operates much better overall these days.