If you're using a Linux machine, the path must start with /var/captures. This option is available if you selected Storage account or Both.Įnter a valid local file path where you want the capture to be saved in the target virtual machine.

Select the resource group of the virtual machine. Select the Azure subscription of the virtual machine. In Add packet capture, enter or select values for the following settings: Setting Any existing packet captures are listed, regardless of their status. Select Packet capture under Network diagnostic tools.

In the search results, select Network Watcher. In the search box at the top of the portal, enter Network Watcher. Similarly, ensure outbound connectivity over the previous ports when adding user-defined routes to your network. If a network security group is associated to the network interface, or subnet that the network interface is in, ensure that rules exist to allow outbound connectivity over the previous ports. The ports mentioned in the latter two cases are common across all Network Watcher features that involve the Network Watcher extension and might occasionally change. to the chosen storage account over port 443.A virtual machine with the following outbound TCP connectivity:.An Azure account with an active subscription.In this article, you learn to start, stop, download, and delete a packet capture. Being able to remotely trigger packet captures, eases the burden of running a packet capture manually on a desired virtual machine, which saves valuable time. Other uses include gathering network statistics, gaining information on network intrusions, to debug client-server communication, and much more. Packet capture helps to diagnose network anomalies, both reactively, and proactively. Filters are provided for the capture session to ensure you capture only the traffic you want. Network Watcher packet capture allows you to create capture sessions to track traffic to and from a virtual machine.

Packet capture tool