Feature #13382
Updated by Marcos M about 1 year ago
This is a complete re-write of the Packet Capture page. Changes: - Saved filename now includes the interface and start time. - Promiscuous mode is enabled by default. - Default packet count is set to 1000 instead of 100. Enhancements: - Automatically convert IP subnet input to a valid subnet to avoid the "non-network bits set" error. This allows the input of e.g. @10.0.0.1/24@. - Allow stopping a running capture even with input errors in the form. - Avoid writing an extra file by reading the last capture start time from the file name. - Keep previous packet captures on the disk (removed when the Clear button is clicked). New: - Quick filter presets for tagged/untagged traffic. - Allow matching on multiple type attribute/type values, e.g. @tcp or udp@. - Allow setting custom values for all types, e.g. @ether proto 0x88cc@. - Allow filtering for VLAN tags, and the tag level (for stacked VLAN packets). tags (including QinQ). - Allow filtering on interfaces that are not assigned (e.g. for VLAN parent interfaces). - Allow forcing any view type, e.g. for CARP traffic. - Live Implement a live preview of the packet capture. Missing (for future MR): - Run multiple packet captures at the same time. - Input validation for all filters that would reject all packets, such as @'icmp6 and ip'@.