Saving Captures

After capturing and analyzing network traffic, a user may want to save the results for later review. 

This is especially useful when troubleshooting issues, documenting findings, or collaborating with other engineers.

Save a Capture File

You can save a entire capture session as a file to review later.

  1. On the user's local PC, verify or set up a sftp capture folder. 
       C:/usr/bob/sftp/capture/
  2. Click File → Save As
  3. Choose  C:/usr/bob/sftp/capture/
  4. Save the file as <name>.pcap

The .pcap format preserves all captured packets and metadata.