Export Packets with Rest API

[Anonymous]

Can anybody give me a sample request to export the packets for specific sessions using the Rest API?

[Anonymous]

There are a couple of options

• http://<device>:<port>/sdk/packets
• http://<device>:<port>/sdk/content  and use render=pcap

Make sure, you use a query to identify only the sessions that you really need extracted instead of extracting large volumes of data.

Hope that helps,

Rui

[Anonymous · Accepted solution]

In action this looks something like this:

curl --user <user>:<password> -o <outputfilename> --data "render=pcap&sessions=<sessionid>" 'http://<device>:<port>/sdk/packets'

[Anonymous]

Awesome information! Could you also provide an example to extract log data from NWFL using the REST API?

I'm looking to extract syslog data from NWFL and use this later in testing to verify content using NwLogPlayer.

[Anonymous]

The call REST endpoint is the same /sdk/packets but I believe you need to use ?render=logs as default is render=pcap.

If you connect to a log decoder with a browser (not IE) you will see the option.

Hope that helps!

Message was edited by: Rui A - Original answer was correct, nothing to add

[Anonymous]

Thanks a lot for your response.

I will give that a shot on Monday.

Regards,

John