All Palo Alto Networks firewalls allow you to take packet
captures (pcaps) of traffic that traverses the management interface
and network interfaces on the firewall. When taking packet captures
on the dataplane, you may need to
Disable Hardware Offload to
ensure that the firewall captures all traffic.