Ip host x.x.x.x.x - a filter that captures packets only with the address x.x.x.x.x. If nothing is specified in the 'Capture filter' field, all network packets will be captured, but in this case, the packet dump file will be larger in size. For example, with the filter 'host 192.168.1.33 and port 53', only DNS traffic from the host 192.168.1.33 will be captured. The filter syntax is the same as in Wireshark. If necessary, you can apply a filter in the 'Capture filter' field to reduce the amount of captured traffic and save memory space for the data you are interested in. In the 'Traffic type to capture' field, you can select a value, depending on which traffic you want to capture - incoming, outgoing, or both (default). Otherwise, the packet capture file will be stored in the internal memory of the device. If your Keenetic has a USB port for external drives, we recommend using it to save the file. Specify the 'Storage location' of the packet capture file. NOTE: Important! It is impossible to capture packets between Wi-Fi-connected clients, as they are handled at the hardware level of the Wi-Fi chipset for maximum performance. In some cases, traffic on the 'Home segment' interface may also be of interest. If you use PPTP, L2TP, PPPoE or 3G/4G modem when connecting to the Internet, in these cases, specify the appropriate interface. In most cases, this is an active interface for connecting to the Internet - 'Provider'. 'Packet capture settings' window will open, where you must specify the 'Connection' (the interface from which you want to capture packets). In the 'Packet capture' section, click 'Create a capture rule'. To capture network packets, go to the 'Diagnostics' page. You can do this on the 'General system settings' page in the 'Updates and component options' section by clicking on 'Component options'.
![network packet capture tool network packet capture tool](https://raw.githubusercontent.com/t3mpv4r/Network-Packet-Sniffer/master/screenshots/Screenshot_3.png)
#Network packet capture tool install
Information of a *.pcapng file alone without self-test.txt will be useless, as it is impossible to determine the conditions under which the packet capture was performed.įor your Keenetic to have a network packet capture setting in its web interface, you need to install the 'Packet capture' OS component. Save it as soon as the packet capture is complete. NOTE: Important! When contacting our technical support team, in addition to the network traffic dump file (*.pcapng) resulting from the packet capture, be sure to provide the system file self-test.txt. Based on this information, it will be possible to conclude the correctness or incorrectness of the routing, host or provider's gateway to determine the causes of the problem and options for fixing them. The network packet dump will help you diagnose network traffic problems and analyze what happens to specific packets. As a result, a special file will be created that can be opened for viewing and analysis on your computer in Wireshark or submitted to the support team for analysis. You can enable network traffic capture through the selected router's interface. Network packet capture is a network diagnostic tool that allows you to capture and store packets passing through the router's network interfaces.