Analyze a packet capture file on the Discover appliance
The offline capture mode in the Discover appliance enables an ExtraHop administrator to upload a capture file recorded by packet analyzer software, such as Wireshark or tcpdump, to the ExtraHop datastore for analysis.
Here are some important considerations before enabling offline capture mode:
- When the capture is set to offline mode, the ExtraHop datastore is reset. All previously recorded metrics are deleted from the datastore. When the system is set to online mode, the datastore is reset again.
- In offline mode, no metrics are collected from the capture interface until the system is set to online mode again.
Set the offline capture mode
Return the appliance to live capture mode
- In the System Configuration section, click Capture (offline).
- Click Restart Capture.
- Select Live, and then click Save.
The Discover appliance removes the performance metrics collected from the
previous capture file and prepares the datastore for real-time analysis from the
capture interface.
Thank you for your feedback. Can we contact you to ask follow up questions?