Project

General

Profile

Feature #13382

Updated by Marcos M over 1 year ago

The current packet capture page has limited filter functionality. This is a complete re-write of the Packet Capture page. 

 https://redmine.pfsense.org/issues/13382 

 Changes: 
 - * Saved filename now includes the interface and start time. 
 - * Promiscuous mode is enabled by default. 
 - * Default packet count is set to 1000 instead of 100. 

 Enhancements: 
 - * Automatically convert IP subnet input to a valid subnet to avoid the "non-network bits set" error. This allows the input of e.g. @10.0.0.1/24@. 
 - * Allow stopping a running capture even with input errors in the form. 
 - * Avoid writing an extra file by reading the last capture start time from the file name. 
 - * Keep previous packet captures on the disk (removed when the Clear button is clicked). 

 New: 
 - * Allow matching on multiple attribute/type values, e.g. @tcp or udp@. 
 - * Allow setting custom values for all types, e.g. @ether proto 0x88cc@. 
 - * Allow filtering for VLAN tags (including QinQ). 
 - * Allow filtering on interfaces that are not assigned (e.g. for VLAN parent interfaces). 

 Missing (for future MR): 
 - * Implement a live preview like nmap or package manager. 

 Missing (for future MR): 
 - * Run multiple packet captures at the same time.

Back