<p class="shortdesc">实时抓包可展示抓包的实时情况。</p> <section class="section prereq" id="Real-timeCaught__prereq_pdg_4zb_tsb"><div class="tasklabel"><h2 class="doc-tairway">前提条件</h2></div> <p class="p">您已创建安全日志审计实例。</p> </section> <section><div class="tasklabel"><h2 class="doc-tairway">操作步骤</h2></div><ol class="ol steps"><li class="li step stepexpand"> <span class="ph cmd">登录<a class="xref" href="https://www.ocftcloud.com/console/log-audit" target="_blank" rel="external noopener">安全日志审计SLA控制台</a>，进入<span class="keyword wintitle">实例列表</span>页面。</span> </li><li class="li step stepexpand"> <span class="ph cmd">单击目标实例<span class="ph uicontrol"> 操作</span>列的<span class="ph uicontrol">管理</span>，进入安全日志审计控制台。</span> <div class="itemgroup info"> <img class="image" id="Real-timeCaught__d80e53" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-1ecc508f988a.png" width="830"> </div> </li><li class="li step stepexpand"> <span class="ph cmd">在页面上边栏选择<span class="ph uicontrol">系统</span>，在左侧菜单栏选择<span class="ph menucascade"><span class="ph uicontrol">系统管理</span><abbr> > </abbr><span class="ph uicontrol">系统维护</span></span>，进入<span class="ph uicontrol">系统维护</span>页面。</span> </li><li class="li step stepexpand"> <span class="ph cmd">选择<span class="ph uicontrol">实时抓包</span>页签，单击<span class="ph uicontrol">创建抓包任务</span>，选择ip地址或者资产，并设置端口、网卡和抓包时间，单击<span class="ph uicontrol">确定</span>。</span> <div class="itemgroup info"> <div class="p"> <img class="image" id="Real-timeCaught__image_zkk_wpt_4sb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-16dc6d289be8.png" width="500"> </div> </div> </li><li class="li step stepexpand"> <span class="ph cmd">之后界面会显示实时抓包状态，单击<span class="ph uicontrol">停止</span>可停止抓包，单击<span class="ph uicontrol">关闭</span>可关闭实时抓包界面。</span> <div class="itemgroup info"> <div class="p"> <img class="image" id="Real-timeCaught__image_qk1_ypt_4sb" width="600" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112057-167b13e997ff.png"> </div> </div> </li></ol></section>