Configure global packet capture
When you enable the global packet capture feature on the Discover appliance, you start collecting packets for every flow to an SSD installed on your Discover appliance or, in the case of a virtual machine, to a regular disk drive.
Before you begin
Make sure you are licensed for the packet capture feature and that you have added the packet capture disk (an SSD on a physical appliance or an additional drive on a virtual machine). Note that the Packet Captures section in the Admin UI does not appear if your Discover appliance is not licensed for the feature. For information about adding an SSD drive, see Install an SSD for Packet Capture on the ExtraHop Discover Appliance.For Discover virtual appliances, refer to your hypervisor manual for configuring an additional 500 GB disk.
Download your packet capture from the View Packet Captures page and open the file in
a packet analyzer such as Wireshark.
Thank you for your feedback. Can we contact you to ask follow up questions?