
This action opens a pop-up window, as shown in the image. Select the Capture menu from the menu bar and select Options, as shown in the image. This should now be able to be emailed to Symantec Technical Support in regards to an open support case, as requested by the case's assigned engineer. Launch the application, as shown in the image.
If the packet trace is to be sent for analysis to Symantec Technical Support, click on the File menu > Save. Immediately after reproducing the issue, back in Wireshark, click on the Stop Capture Icon.
Reproduce the issue you are trying to debug. Uncheck "Capture packets in promiscuous mode" and "Enable MAC name resolution". Click "Options" button for the interface you wish to do the capture on. In Wireshark, click on the Capture Icon. Note: If the operating system includes User Access Control (UAC), right click on Wireshark's shortcut or executable file and choose "Run as administrator". Install and run Wireshark on the Symantec Endpoint Encryption server or the client computer to be used debugging issue. During its installation, ensure that WinPcap is also installed. Please contact your network administrator for assistance as necessary. Symantec Technical Support is unable to therefore assist the customer in configuring Wireshark or understanding its packet trace.
Go back to Wireshark and stop the capture process. Open your command prompt and ping the address of your choice. These instructions are provided as a courtesy for Symantec customers wishing to use this tool in conjunction with troubleshooting issues with Symantec products. Open Wireshark and start the capturing process as described above. Note: This article describes how to capture a network packet trace using the free third party software "Wireshark" from Riverbed Technology on the web site.