Packet Capture Investigations

The monitoring device that monitors the unoptimized server traffic also performs packet capture investigations.

If you are using a CA Standard Monitor to monitor the unoptimized server traffic, the monitoring device:

Launches a packet capture investigation after the management console creates an incident.
Runs one packet capture investigation at a time.
Captures the unoptimized Server segment. If another monitoring device is closer to the server SPAN, the corresponding monitor feed is assigned to the server.
Copies the packet capture file from the monitoring device to the user’s local computer. Depending on the size of the packet capture file, it can take a long time to open the packet capture investigation.
The CA Standard Monitor does not provide long term packet storage.