Juniper Networks J-Series - Manual (Page 286)

}
Meaning Verify that the output shows the intended file configuration for capturing packets.
Related Topics For more information about the format of a configuration file, see the information
about viewing configuration text in the J-series Services Router Basic LAN and WAN
Access Configuration Guide.
Displaying a Firewall Filter for Packet Capture Configuration
Purpose Verify the firewall filter for packet capture configuration.
Action From the J-Web interface, select
Configuration>View and Edit>View Configuration Text. Alternatively, from
configuration mode in the CLI, enter the
show firewall filter dest-all command.
[edit]
user@host# show firewall filter dest-all
term dest-term {
from {
destination-address 192.168.1.1/32;
}
then {
sample;
accept;
}
}
Meaning Verify that the output shows the intended configuration of the firewall filter for
capturing packets sent to the destination address 192.168.1.1/32.
Related Topics For more information about the format of a configuration file, see the information
about viewing configuration text in the J-series Services Router Basic LAN and WAN
Access Configuration Guide.
Verifying Captured Packets
Purpose Verify that the packet capture file is stored under the /var/tmp directory and the
packets can be analyzed offline.
Action Take the following actions:
■ Disable packet capture. See “Disabling Packet Capture” on page 261.
■ Perform these steps to transfer a packet capture file (for example, 126b.fe-0.0.1 ),
to a server where you have installed packet analyzer tools (for example,
tools-server ), using FTP.
1. From the CLI configuration mode, connect to tools-server using FTP:
user@host# run ftp tools-server
Connected to tools-server.mydomain.net
220 tools-server.mydomain.net FTP server (Version 6.00LS) ready
264 ■ Displaying a Firewall Filter for Packet Capture Configuration
J-series™ Services Router Administration Guide