You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/network-watcher/packet-capture-overview.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,7 +13,7 @@ ms.date: 02/24/2026
13
13
14
14
# Packet capture overview
15
15
16
-
Azure Network Watcher packet capture allows you to create packet capture sessions to track traffic to and from a virtual machine (VM) or a scale set. Packet capture helps to diagnose network anomalies both reactively and proactively. Other uses include gathering network statistics, gaining information on network intrusions, debugging client-server communications and more.
16
+
Azure Network Watcher packet capture allows you to create packet capture sessions to track traffic to and from a virtual machine (VM) or a scale set. Packet capture helps to diagnose network anomalies both reactively and proactively. Other uses include gathering network statistics, gaining information on network intrusions, debugging client-server communications, and more.
17
17
18
18
Packet capture is an extension that is remotely started through Network Watcher. This capability saves time and eases the burden of running a packet capture manually on the desired virtual machine or virtual machine scale set instances.
19
19
@@ -31,7 +31,7 @@ You can trigger packet captures through the portal, PowerShell, Azure CLI, or RE
31
31
> Continuous packet capture is currently in PREVIEW.
32
32
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
33
33
34
-
Continuous packet capture allows you to persistently monitor network traffic using a ring buffer–based mechanism. Unlike standard packet captures that stop after reaching a specific time or file size, continuous capture is designed to run over extended durations, making it ideal for diagnosing intermittent or long-tail issues. Currently, you can configure continuous packet capture using the [Azure Portal](packet-capture-manage.md?tabs=portal#start-a-packet-capture)
34
+
Continuous packet capture allows you to persistently monitor network traffic using a ring buffer–based mechanism. Unlike standard packet captures that stop after reaching a specific time or file size, continuous capture is designed to run over extended durations, making it ideal for diagnosing intermittent or long-tail issues. Currently, you can configure continuous packet capture using the [Azure portal](packet-capture-manage.md?tabs=portal#start-a-packet-capture)
35
35
36
36
### How it works
37
37
@@ -43,7 +43,7 @@ When continuous packet capture is enabled:
43
43
44
44
- Once the file count limit is reached, the oldest file is automatically deleted to allow space for new packets, maintaining a continuous stream of recent data.
45
45
46
-
- The capture runs for the user-specified time duration, or a maximum of 7 days, whichever is earlier.
46
+
- The capture runs for the user-specified time duration, or a maximum of seven days, whichever is earlier.
47
47
48
48
This ring buffer–style storage helps reduce manual intervention and avoid excessive storage consumption while ensuring that recent traffic is always available for review.
49
49
@@ -54,7 +54,7 @@ To control the size of captured data, use the following options:
54
54
| Property | Description |
55
55
| -------- | ----------- |
56
56
|**Maximum bytes per packet (bytes)**| The number of bytes from each packet. All bytes are captured if left blank. Enter 34 if you only need to capture IPv4 header. |
57
-
|**Time limit per session (seconds)**| Packet capture session time limit, once the value is reached the session ends. The default value is 18000 seconds (5 hours). |
57
+
|**Time limit per session (seconds)**| Packet capture session time limit. Once the value is reached, the session ends. The default value is 18000 seconds (5 hours). |
58
58
59
59
If you're using continuous capture (preview), use the following options to control the size of captured data:
60
60
@@ -63,7 +63,7 @@ If you're using continuous capture (preview), use the following options to contr
63
63
|**Maximum bytes per packet (bytes)**| The number of bytes from each packet. All bytes are captured if left blank or set to 0. Enter 34 if you only need to capture IPv4 header. |
64
64
|**New files created**| Total files that can be created. The default value is 10. The maximum value is 10,000.|
65
65
|**Bytes per file**| Total number of bytes per file. The default value is 100 MB. The maximum value is 4 GB. |
66
-
|**Time limit per session (seconds)**| Packet capture session time limit, once the value is reached the session ends. The default value is 86400 seconds (1 day). The maximum value is 604800 seconds (7 days). |
66
+
|**Time limit per session (seconds)**| Packet capture session time limit. Once the value is reached, the session ends. The default value is 86400 seconds (1 day). The maximum value is 604800 seconds (7 days). |
67
67
68
68
## Filtering (optional)
69
69
@@ -87,13 +87,13 @@ Use filters to capture only the traffic that you want to monitor. Filters are ba
87
87
88
88
### Continuous capture considerations
89
89
90
-
In addition to the above considerations, keep the following in mind when using continuous packet capture (preview):
90
+
In addition to the previous considerations, keep the following considerations in mind when using continuous packet capture (preview):
91
91
92
92
- Continuous capture is available only for supported VM and VMSS SKUs and regions.
93
93
94
94
- The target VM must have sufficient space, or the connected storage account must have appropriate quota to accommodate capture data.
95
95
96
-
- Captures with high packet volumes may generate large data sizes quickly. Choose file size and count accordingly to manage buffer length and retention.
96
+
- Captures with high packet volumes might generate large data sizes quickly. Choose file size and count accordingly to manage buffer length and retention.
0 commit comments