The NDR appliance Web UI now supports bulk PCAP downloads, which allow you to download the PCAP for up to 100,000 flow records. This increases the previous PCAP download limit imposed by the Event Table of 5000 flow records. You can manage and view active bulk PCAP downloads from the Bulk PCAP Downloads page.
This feature also includes a purge policy. The NDR appliance automatically removes downloads that are older than 14 days and will purge downloads when the NDR disk reaches 75% of its storage capacity. PCAP downloads are removed in order of the oldest to most recent.