How to capture packets on WAN Port via SSH and Download it

Hello,

You can use "tcpdump -i Port1 -w file.pcap", where Port1 is the Hardware Interface you want do to the packet capture. You can check the Interfaces with "ip a", and over the Web UI.

After the packet capture, the file will be located at the /tmp folder, in the example above It will be located at: "/tmp/file.pcap"

You will be able to get the file from the firewall with scp, an example would be: "scp admin@10.0.0.1:/tmp/file.pcap". You should change the IPv4 Address to the one of your Firewall.

Thanks!

PS: You need to use -b in SFOS to write the file.

tcpdump -ni Port1 -w /tmp/file.pcap -b 

And you can use PSCP or tools like MobaXterm to download the file. 

It doesn´t accept Port2. 

Where is the mistake?

You need to go to the Advanced Shell, not Console. Its Point 5 --> 3 not Point 4. 

Thanks it works.

Thanks it works.