546
edits
Packet ring buffer: Difference between revisions
→Packet ring buffer snapshot length filter
| Line 126: | Line 126: | ||
:If this is on, the value must not match. | :If this is on, the value must not match. | ||
* Action: What shall be done with the matching packets. | * Action: What shall be done with the matching packets. | ||
** Snapshot length: The packet is captured with a max length as specified in the input field below. If the packet is larger, the remaining bytes will be discarded. | |||
** Discard: Discard the whole packet. | |||
** Full: The whole packet is captured. | |||
** Header + data: Capture just certain parts of the packet. When selecting '''L3 header''', layer 2 and layer 3 headers are stored. | |||
:When selecting '''L3 + L4 header''', layer 2, 3 and 4 headers are stored. | :When selecting '''L3 + L4 header''', layer 2, 3 and 4 headers are stored. | ||
:When selecting '''L3 + L4 + L7 data''', an input field is shown where the length of layer 7 data can be configured. In this case layer 2, 3 and 4 are stored together with the specified amount of layer 7 data. | :When selecting '''L3 + L4 + L7 data''', an input field is shown where the length of layer 7 data can be configured. In this case layer 2, 3 and 4 are stored together with the specified amount of layer 7 data. | ||
==== Analyzing the packet ring buffer ==== | ==== Analyzing the packet ring buffer ==== | ||