Viewing PCAP transcripts

Prev Next

A transcript shows high level information about the communication that occurred during session that the PCAP covers. What is shown varies depending on the type of traffic observed. For example, it you are viewing an email transfer, you will see the SMTP headers. If you are viewing an HTTP request, you will see the HTTP headers and a snippet of text from the page.

To view the transcript of a processed PCAP retrieval request:
  1. From the main menu, select Explore > PCAPs to open the PCAP Queue.

  2. Click Preview in the row containing your PCAP transcript.

  3. Click Close when finished viewing the transcript.

To download the PCAP file to your desktop:

Click the PCAP_download_icon.png icon in the Download column of the row containing your PCAP transcript.

Note

PCAPs never leave your network, so to download a PCAP, you must be on the same network as the Cloud Collector that contains the PCAP.