I'm hitting a limit of 128KB file size on PCAP files that I export using snoop. I need to capture traffic for about 5 minutes and this is limiting me.
Here is my filter:
ssg550-> snoop info
Snoop: ON
Filters Defined: 1, Active Filters 1
Detail: ON, Detail Display length: 1514
Snoop tunnel traffic: ON
Snoop filter based on:
id 1(on): IP ip X.X.X.X dir(B)
ssg550-> get dbuf stream > tftp X.X.X.X NewCapture.pcap
Every single capture file is limited to 128KB if I run the capture for 1 minute or 5 minutes, it just overwrites the beginning of the file. I need the capture in PCAP/Wireshark format as well as see the entire TCP flow which is why I am not just displaying the traffic in the buffer.
Is there any solution?