QC Ubiquiti EdgeMAX - Capture Packets & Create PCAP Files (TCPdump)

[@jonpinkley2844]

I like to save save pcaps to the /tmp directory, which is not saved to flash; it is in the DRAM based tempfs. If you are going to copy to your pc for analysis with wireshark, you don't need a permanent copy on the EdgeRouter anyway. In addition to not wearing out the non-replaceable flash memory, the DRAM is much faster, so there will be fewer dropped packets.