Running network traces - Security Center 5.7

Security Center Administrator Guide 5.7

Applies to
Security Center 5.7
Last updated
Content type
Guides > Administrator guides
English (United States)
Security Center

You can run a network trace directly from Config Tool, even if you do not have a network packet analyzer installed on your computer.

What you should know

  • Security Center uses WinPcap library to capture the network trace.
  • To read these network packet data files (.pcap), you must have a compatible network packet analyzer installed, such as Wireshark.


  1. On the Config Tool home page, open the Video task.
  2. From the entity tree, select video units to analyze.
    Tip: Press the Ctrl key to perform a multiple-selection.
  3. Right-click your selection and click Unit > Network trace.
  4. (Optional) Click Advanced settings () to change the default settings for a particular capture.
    Capture filter
    Select the type of traffic you want to capture.
    All traffic
    Capture everything between the video unit and the Archiver.
    TCP & HTTP
    Capture only TCP and HTTP traffic between the video unit and the Archiver. This eliminates other traffic like UDP.
    Custom filter. Use the same syntax as for Wireshark.

    Example: host and not udp.

    Maximum file length
    Maximum duration of the capture (default=10 minutes).
    Maximum file size
    Maximum size of the captured data file (default=15 MB).
    Use file rotation
    • OFF (default): The capture stops when either the maximum file length or the maximum file size is reached, whichever comes first.
    • ON: The capture lasts up to the maximum file length. A new file is created every time the maximum file size is reached, but only the last two are kept.
  5. Do one of the following:
    • Click Start capture () to start a specific capture.
    • Click Start all captures () to start all configured captures.
  6. Click Close when you finish.


The captured network packets saved in data files on the server hosting the Archiver role, in the folder C:\Windows\Temp.
The file names follow the format genetec_capture_<address>_<date>_<time>_<sequence>.pcap, where:
  • <address> is the IP address of the video unit.
  • <date> is the capture start date in the 'yy-mm-dd' format.
  • <time> is the capture start time in hours, minutes, and seconds.
  • <sequence> is the file sequence number.
    NOTE: When file rotation is turned on, it indicates how many files were created during the capture event. Only the last two are kept. Otherwise, it stays at '0001'.