packet capture for AWS and on-prem firewall

Question

How do I setup a packet capture in AWS to capture packets from my on-prem firewall?  I want to see if traffic from a specific public IP address is making it from my firewall to my AWS IP address.  I have tried following the instructions for creating traffic mirroring targets, filters, and sessions.
Please let me know what other information is needed.
Thanks,

kentrad · Answer

If you don't really need the data packets, you should take a look at [VPC Flow Logs](https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html). You can turn it on for an individual Instance (ENI) and publish the data to CloudWatch Logs.

rePost-User-5310971 · Answer

I would use the follwing feature : https://aws.amazon.com/blogs/aws/new-vpc-traffic-mirroring/ to get your the data you need. On the onprem firewall you can initiate a packet pacture for the outbound interface using the provided tools of yoru oprem firewall.

packet capture for AWS and on-prem firewall

Relevant content