How to take the capture as pcap/wireshark formart in Checkpoint?
How to take the capture as pcap/wireshark formart in Checkpoint?
Let's say you need to view the capture in wireshark. In that case it needs to be exported. In order to export the capture we need to save it.
Syntx:
tcpdump -nni interface_name host IP_address_here -w/location/name.pcap
[Expert@fw-checkpoint-raj:0]# tcpdump -nni eth2.2 host 10.197.112.5 -w/var/log/raj.pcaptcpdump: listening...