The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Get the Packet Capture Settings

Prev Next

This URL retrieves the packet capture settings.

Resource URL

GET /sensor/<sensor_id>/packetcapture

Request Parameters

URL Parameters:

Field Name Description Data Type Mandatory
sensor_id Sensor id Number Yes

Payload Request Parameters: None

Response Parameters

Following fields are returned if the request parameters are correct, otherwise error details are returned.

Field Name Description Data Type
status Status of packet capture String
capTureSettings Packet capture settings Object
rules List of packet capture rule Object

Details of capTureSettings:

Field Name Description Data Type
monitoringSPANPort Monitoring SPAN port details Object
manager Manager settings Object
scpServer SCP server settings Object

Details of rules:

Field Name Description Data Type
captureRule List of rules ObjectList

Details of monitoringSPANPort:

Field Name Description Data Type
port Monitoring SPAN port String
captureDuration Duration details Object

Details of captureDuration:

Field Name Description Data Type
captureDurationInMinutes Capture duration Number
runTillExplicitlyReleased Run until released Boolean

Details of Manager:

Field Name Description Data Type
captureSizeinMB Capture size Number

Details of scpServer:

Field Name Description Data Type
scpServerIP IP of SCP server String
scpServerUserName SCP user name String
scpServerPassword SCP server password String
captureSizeinMB Capture size Number

Details of captureRule:

Field Name Description Data Type
ruleId Rule id Number
monitoringPort Monitoring port String
traffic Traffic String
protocol Protocol String
ipVersion IP version String
fragmentsOnly Fragments only Boolean
sourceIP Source IP String
sourceMask Source mask Number
sourcePort Source port Number
destinationIP Destination IP String
destinationMask Destination mask Number
destinationPort Destination port Number
vlanId VLAN id Number
protocolNumber Protocol number Number

Example

Request

GET https://<NSM_IP>/sdkapi/sensor/1001/packetcapture

Response

{
	"status": "Not yet started",
	"capTureSettings": {
		"monitoringSPANPort": {
			"port": "Capturing Disabled",
			"captureDuration": {
				"captureDurationInMinutes": 120,
				"runTillExplicitlyReleased": false
			}
		},
		"manager": null,
		"scpServer": null
	},
	"rules": {
		"captureRule":
       [
           {
               "ruleId": 716,
               "monitoringPort": "ALL",
               "traffic": "ALL",
               "protocol": "TCP",
               "ipVersion": "IPV_6",
               "fragmentsOnly": true,
               "sourceIP": "0.0.0.0",
               "sourceMask": 0,
               "sourcePort": 0,
               "destinationIP": "0.0.0.0",
               "destinationMask": 0,
               "destinationPort": 0,
               "vlanId": 0,
               "protocolNumber": 0
           },
           {
               "ruleId": 717,
               "monitoringPort": "ALL",
               "traffic": "ARP",
               "protocol": "TCP",
               "ipVersion": "IPV_6",
               "fragmentsOnly": true,
               "sourceIP": "0.0.0.0",
               "sourceMask": 0,
               "sourcePort": 0,
               "destinationIP": "0.0.0.0",
               "destinationMask": 0,
               "destinationPort": 0,
               "vlanId": 0,
               "protocolNumber": 0
           } ]
   }
	} 
 

Error Information

Following error codes are returned by this URL:

No HTTP Error Code SDK API errorId SDK API errorMessage
1 404 1106 Invalid Sensor
2 500 1124 The Sensor is inactive
3 400 6201 Packet capture not supported on this Sensor