Packet Capture on a Juniper Netscreen/SSG

--
Basic Traffic Capture
--
Set up capture
clear db
set console dbuf
set ffilter src-ip 1.1.1.1 dst-ip 2.2.2.2
debug flow basic

generate some traffic


view the output of the capture
get dbuf stream


when done, turn off debugging-
undebug all

--

Example to Capture VPN/IPSEC Traffic:

--

set console dbuf

set ffilter dst-ip 1.1.1.1 ip-proto 50

set ffilter src-ip 1.1.1.1 ip-proto 50

debug ike basic

debug flow all

cl db

get dbuf stream