Integrated packet capture tool for Citrix SecurAccess for connectivity troubleshooting

Last published : Nov 12, 2026
Important:
Citrix Secure Access is now called Citrix SecurAccess™. We are updating our documentation and the UI screenshots to reflect this name change.
The Citrix SecurAccess VPN client for Windows includes an integrated network packet capture tool to help troubleshoot connectivity issues. Captured files are automatically saved to the logs\captures\ directory under the Citrix SecurAccess installation folder. Automatic file rotation helps limit disk usage. The packet capture files are also automatically included in the diagnostic log bundle when logs are collected for Citrix Support.
Note:
  • The network packet capture tool is available only in the new WebModule UI.
  • The Citrix SecurAccess installer includes the packet capture utility and the required WinDivert kernel driver dependencies. No separate installation is required.
Related information
Improved log collection for Windows client

Start a packet capture

  1. Open the Citrix SecurAccess application.
  2. Click the Settings tab.
  3. In the left panel, select Troubleshooting.
  4. In the right pane, go to the Network capture section.
  5. Click Start network monitor to begin capturing network traffic.
Start a packet capture
When capture starts, the status changes to Capture in progress... and the Stop button becomes available.

Stop a packet capture

  1. In the Citrix SecurAccess application, navigate to Settings > Troubleshooting.
  2. When capture is active, the Network capture panel shows Capture in progress... with a red indicator.
  3. Click the Stop button to end the capture.
Stop a packet capture

After capture stops: download or restart

Once the capture stops, the status changes to Capture complete (green indicator).
You can then choose one of the following options:
  • Download: Saves the capture file to your local machine.
  • Restart: Starts a new packet capture session immediately.
An information banner displays the full path where the capture file is saved. For example:
C:\Program Files\Citrix\Secure Access Client\logs\captures\csatrace_20260407_092046.pcap
The .pcap file can be opened in a packet analysis tool such as Wireshark for further investigation or shared with Citrix Support.