This article is intended for IT support.
This article discusses how to run a Packet Capture in School Manager. Capturing packets is a common troubleshooting technique for IT Administrators. It is used to examine network traffic flowing through your filtering device.
Running a Packet Capture
- Select the kebab menu icon (three vertical dots) in the upper-left of your window.
- Select Tools
- You can Filter to test an IP Address and/or Port. For example, “host 192.168.0.1” or “host 192.168.0.1 and port 25”
- Select the Interface and select Start
- After a few seconds, you will see the number of collected packets. When you are ready, select Stop, this will automatically download the results into a .pcap file.
Hint
You should take multiple packet captures as PCAP files can sometimes become corrupted during the capture process and may not display all their contents in Wireshark.
-
Open the .pcap file using a program such as Wireshark.
Note
When the Packet Capture reaches 10,000 packets, the process will stop capturing any further packets.
Troubleshooting
I'm not getting any results
- Check that your filter IP address is correct
- Check that you have selected the correct Interface
Hint
To determine which interface a user’s traffic is coming through:
- Go to Statistics > Realtime > Users and Hosts
- Locate the device's IP address and select Trace Host from the kebab menu icon on the right hand side
- Select the arrow icon to view the Connection Details of a piece of traffic
- Check the “Input dev” field, indicating the interface you must capture.
- Confirm that there is networking traffic flowing through your chosen Interface
If you require further assistance, contact Linewize Support.
Comments
0 commentsPlease sign in to leave a comment.