Using Packet Monitor and Packet Mirror

In addition to Configure, the Packet Monitor page provides several buttons for general control of the packet monitor feature and display.

•	Monitor All – Resets current monitor filter settings and advanced page settings so that traffic on all local interfaces is monitored. A confirmation dialog box displays when you click this button.

•	Monitor Default – Resets current monitor filter settings and advanced page settings to factory default settings. A confirmation dialog box displays when you click this button.

•	Clear – Clears the packet monitor queue and the displayed statistics for the capture buffer, mirroring, and FTP logging. A confirmation dialog box displays when you click this button.

The other buttons and displays on this page are described in the following sections:

•	Starting and Stopping Packet Capture

•	Starting and Stopping Packet Mirror

Starting and Stopping Packet Capture

You can start a packet capture that uses default settings without configuring specific criteria for packet capture, display, FTP export, and other settings. If you start a default packet capture, the SonicWALL appliance captures all packets except those for internal communication, and stops when the buffer is full or when you click Stop Capture.

1	(optional) Click Clear to set the statistics back to zero.

2	Under Packet Monitor, click Start Capture.

3	To stop the packet capture, click Stop Capture.

Starting and Stopping Packet Mirror

You can start packet mirroring that uses your configured mirror settings by clicking Start Mirror. It is not necessary to first configure specific criteria for display, logging, FTP export, and other settings. Packet mirroring stops when you click Stop Mirror.

1	Under Packet Monitor, click Start Mirror to start mirroring packets according to your configured settings.

2	To stop mirroring packets, click Stop Mirror.