Which three fields can be included in a pcap filter? (Choose three)

The correct answer is B. Source IP D. Destination IP E. Ingress interface. In PAN-OS, packet capture (pcap) filters allow administrators to narrow captured traffic to specific flows. The supported filter fields include: Source IP (B), Destination IP (D), Ingress Interface (E), as well as source port and destination port. Egress interface (A) is not a su

Submitted by jordan8· Apr 18, 2026Operate

Question

Exhibit

Options

AEgress interface
BSource IP
CRule number
DDestination IP
EIngress interface

How the community answered

(54 responses)

A
2% (1)
B
94% (51)
C
4% (2)

Explanation

In PAN-OS, packet capture (pcap) filters allow administrators to narrow captured traffic to specific flows. The supported filter fields include: Source IP (B), Destination IP (D), Ingress Interface (E), as well as source port and destination port. Egress interface (A) is not a supported filter field in PAN-OS packet capture - filters are applied on ingress. Rule number (C) is also not a valid pcap filter field; packet capture operates at the network level, not the policy rule level. Therefore, B, D, and E are the three correct choices.

Topics

#Packet Capture#Pcap Filters#Networking#Troubleshooting Tools

Community Discussion

No community discussion yet for this question.

Full PCNSE Practice