Managing Incident Responses › How Incident Responses Work › Packet Capture Investigations

Packet Capture Investigations

Use a packet capture investigation to perform a filtered capture of the particular server, application port, and network experiencing a problem.

You can assign a Packet Capture investigation to an application in response to a server incident, or to a server and to the poor performing applications running on that server. The management console automatically takes the packet capture from the appropriate monitoring device. When the packet capture is taken by:

• A CA Standard Monitor, the capture file is copied from the monitoring device to the user's computer on TCP-8080. Make sure the user's computer has access to the monitoring device.
• A CA Multi-Port Monitor, the capture file is not copied to the user's computer. The user views the capture file on the monitoring device.

The following monitoring devices do not take a packet capture investigation for CA Application Delivery Analysis:

• Cisco WAE device
• Cisco NAM device

A management console administrator can also launch or schedule this investigation from the Incidents page. For more information, see the User Guide.

A packet capture investigation report includes information about the server, application, network, and a link to view the packet capture results.