Another way to troubleshoot is to use Network Miner. The steps to use it are as follows:
- Install a rport endpoint on your laptop using the port 44013 as an example.
- Fire up Network Miner and do a PCap over IP to port 44013 on the rport instance.
- Send packets from the edge to the miner using:
tcpdump -i eth1 -s 0 -U -w - | nc rport.instance.somewhere 44014