PCNSE · Question #800
A firewall administrator is changing a packet capture filter to troubleshoot a specific traffic flow Upon opening the newly created packet capture, the administrator still sees traffic for the…
The correct answer is C. Command line> debug dataplane packet-diag clear filter all. When a new packet capture filter is applied, remnants of the previous filter might still exist in the firewall's packet capture configuration. To ensure the newly configured filter is applied correctly, the administrator should clear the existing filter using the command >…
Question
A firewall administrator is changing a packet capture filter to troubleshoot a specific traffic flow Upon opening the newly created packet capture, the administrator still sees traffic for the previous fitter. What can the administrator do to limit the captured traffic to the newly configured filter?
Options
- ACommand line > debug dataplane packet-diag clear filter-marked-session all
- BIn the GLH under Monitor > Packet Capture > Manage Filters under Ingress Interface select an
- CCommand line> debug dataplane packet-diag clear filter all
- DIn the GUI under Monitor > Packet Capture > Manage Filters under the Non-IP field, select
How the community answered
(23 responses)- A4% (1)
- B13% (3)
- C78% (18)
- D4% (1)
Explanation
When a new packet capture filter is applied, remnants of the previous filter might still exist in the firewall's packet capture configuration. To ensure the newly configured filter is applied correctly, the administrator should clear the existing filter using the command > debug dataplane packet-diag clear filter all. This clears any old filters and allows the new filter to be the only active one for packet captures.
Topics
Community Discussion
No community discussion yet for this question.