Send the captured file to an SCP server

To capture and send the files to the SCP server:

1. For a standalone Sensor, select Devices → <Admin Domain Name> → Devices → <Device Name> → Troubleshooting → Packet Capturing → Capture Now.
   For Sensors in a stack, select Devices → <Admin Domain Name> → Devices → <Device Name> → Member Sensors → <Stackname-node id> → Troubleshooting → Packet Capturing → Capture Now.
2. From the Send Captured Packets To drop-down list, select An SCP Server.
3. Enter the SCP Server credentials, SCP Server IP, SCP Server User Name and SCP Server Password.
4. Type the maximum file size in the Maximum Capture Size (MB) field.

   Note

   The maximum file size can be configured up to the maximum value of Sensor defined limits.

5. Click Test Connection.
   The Test Connection operation establishes a connection between the Sensor and the SCP server, and creates a test file. This is to verify whether the server is reachable and the files can be written.

   Note

   The Test Connection operation can fail due to MACs and Ciphers mismatch between the Sensor and SCP server.

6. Configure the Capture Rules.

   Note

   If you are configuring for a Sensor from a stack of NS9500 Sensors, you cannot configure rules at an interface level. You have to configure to All interface.

7. Click Save to save the capture settings.
8. Click Start.
   When the maximum file size is reached, the Sensor uploads the captured file to the Manager.
9. To stop the packet capture session, before the configured maximum file size, click Stop. The Sensor sends the captured file to the SCP server.
10. Click Cancel. The Sensor stops the capture and deletes the captured file.

    Note

    If file upload has started, then it cannot be canceled.