You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/content/docs/cloudflare-one/insights/dex/remote-captures.mdx
+10-7Lines changed: 10 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -33,16 +33,19 @@ Remote captures allow administrators to collect packet captures (PCAPs) and WARP
33
33
To capture data from a remote device:
34
34
35
35
1. In [Zero Trust](https://one.dash.cloudflare.com/), go to **DEX** > **Remote captures**.
36
-
2. Select the device(s) you want to run a capture on. Devices must be [registered](/cloudflare-one/connections/connect-devices/warp/deployment/) in your Zero Trust organization.
36
+
2. Select up to 10 devices that you want to run a capture on. Devices must be [registered](/cloudflare-one/connections/connect-devices/warp/deployment/) in your Zero Trust organization.
37
37
3. Configure the types of captures to run.
38
-
-**PCAP**: Performs packet captures by running `warp-cli debug pcap start` and `warp-cli debug pcap stop` commands on the device. The capture will include two files -- a PCAP for traffic outside of the WARP tunnel (default network interface), and a PCAP for traffic inside of the WARP tunnel ([WARP virtual interface](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/warp-architecture/#ip-traffic)).
39
-
<Detailsheader="PCAP limits">
38
+
-**PCAP**: Performs packet captures for traffic outside of the WARP tunnel (default network interface) and traffic inside of the WARP tunnel ([WARP virtual interface](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/warp-architecture/#ip-traffic)).
39
+
<Detailsheader="PCAP capture limits">
40
40
Packet captures are subject to the following limits:
41
-
- **Maximum time limit**: 1,800 seconds
42
-
- **Maximum file size**: 100 MB
43
-
- **Maximum packet size**: 160 bytes
41
+
- **Maximum time limit**: 600 seconds
42
+
- **Maximum file size**: 50 MB
43
+
- **Maximum packet size**: 1500 bytes
44
+
</Details>
45
+
- **WARP Diagnostics Logs**: Generates a [WARP diagnostic log](/cloudflare-one/connections/connect-devices/warp/troubleshooting/warp-logs/#warp-diag-logs) of the past 96 hours. To include a routing test for all IPs and domains in your [Split Tunnel configuration](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/), select **Test all routes**.
46
+
<Detailsheader="WARP capture limits">
47
+
WARP diagnostic logs have no file size limit, but files larger than 100 MB cannot be uploaded to Cloudflare and must be shared directly with the admin.
44
48
</Details>
45
-
- **WARP Diagnostics Logs**: Generates [WARP diagnostic logs](/cloudflare-one/connections/connect-devices/warp/troubleshooting/warp-logs/#warp-diag-logs) by running a `warp-diag` command on the device. You can optionally select **Test all routes** to run an `ip route get` command for all IPs and domains in your [Split Tunnel configuration](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/split-tunnels/).
46
49
4. Select **Start a capture**.
47
50
48
51
DEX will now send capture requests to the configured devices. If the WARP client is disconnected, the capture will time out after 10 minutes.
0 commit comments