I do believe that it is not until you stop the capture that all data is flushed to the capture-file. If you have a small enough flow, the file will be empty until you stop the capture.

/Per

On 17 Feb 2017, at 17:44, Jonathan Call wrote:

I followed the instructions listed here to create and start a capture for a single destination IP address on an SRX5400 in a lab:


https://kb.juniper.net/InfoCenter/index?page=content&id=KB21563


I can see a flow for the IP when I run a "show security flow session destination-prefix 172.16.x.x/32" but no traffic is captured. The file size remains at zero.


I'm new to this platform so any suggestions would be appreciated.


Jonathan

_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to