The instructions assume you understand network traffic fundamentals. This tutorial offers tips on how to export different types of objects from a pcap. Please make sure to send us a new set of high-level logs from the backup agent together with the Wireshark capture file, as we won’t be able to investigate it otherwise.When reviewing packet captures (pcaps) of suspicious activity, security professionals may need to export objects from the pcaps for a closer examination. The support team might provide more detailed instructions depending on the issue you’re experiencing. Click the drop-down menu next to Backup prefix. Retrieve the information about the bucket by going to the main menu in the Backup Agent: Edit Storage Accounts > Select the affected account > Advanced Settings.Run a repository synchronization or a consistency check plan.Here is a non-exhaustive list of actions that can be performed after starting the capture to collect the necessary information for troubleshooting: You can learn more capture output options here: The capture files can get large, so it is possible to limit the output under Capture > Options > Output. To collect the information for the support team, please start the capture, reproduce the issue/error and save the capture file:.You can choose a different network interface to capture under Capture > Options. If the capture log is empty, please make sure that you’ve selected the correct network interface.You can stop the capture after confirming that it’s working fine and capturing the packets:.Select the network interface to capture after installing and starting the tool:.Download the Wireshark tool from the official website.Sometimes it might be necessary to troubleshoot the machine’s connection to the storage using 3rd party tools such as Wireshark if the diagnostic logs from the backup software do not contain enough information to find the source of a connection issue. Collecting Traffic Logs Using Wireshark Software Situation

Wireshark tools download