Feature #13382
Updated by Marcos M over 1 year ago
The current packet capture page has limited filter functionality. This is a complete re-write of the Packet Capture page. Changes: * Saved filename now includes the interface and start time. * Promiscuous mode is enabled by default. * Default packet count is set to 1000 instead of 100. Enhancements: * Automatically convert IP subnet input to a valid subnet to avoid the "non-network bits set" error. This allows the input of e.g. @10.0.0.1/24@. * Allow stopping a running capture even with input errors in the form. * Packet capture start time is included in and taken from the file name. This avoid writing an extra file. * Keep previous packet captures on the disk (removed when the Clear button is clicked). New: * Allow matching on multiple attribute/type values, e.g. @tcp or udp@. * Allow setting custom values for all types, e.g. @ether proto 0x88cc@. * Allow filtering for VLAN tags (including QinQ). * Allow filtering on interfaces that are not assigned (e.g. for VLAN parent interfaces). Missing (for future Optional (I'm leaving these for a futre MR): * Implement a live preview like nmap or package manager. * Run multiple packet captures at the same time.