Views:
To obtain all the PCAP information from the SMS for a group of events, you must know the event IDs. Event IDs are included in data sent to a remote syslog server.

Definition

pcaps/getByEventIds

Set up event-based packet trace

  1. Set up a remote syslog server.
  2. Add all the event IDs to a file as a comma separated list. New line breaks are allowed. The result outputs to STDOUT and can be redirected to a file with a '>' operator. 

curl -k --header "X-SMS-API-KEY: <string>" -F "file=@<path/to/file.txt>"
"https://<sms_server>/pcaps/getByEventIds?"