inactive
369
edits
Packet ring buffer: Difference between revisions
m
no edit summary
mNo edit summary |
mNo edit summary |
||
| Line 40: | Line 40: | ||
When the ring buffer is full and old packets are deleted, the graphs will show the time range with no data with a dark grey background colour. | When the ring buffer is full and old packets are deleted, the graphs will show the time range with no data with a dark grey background colour. | ||
The time range before start of the ring buffer will be visualized in the same way. | The time range before start of the ring buffer will be visualized in the same way. | ||
When the ring buffer is running, the | When the ring buffer is running, the behaviour of the pcap capture buttons throughout the system changes: if the user interface is in live mode and a capture is started, a dialogue will appear asking you to specify from how far back in time the capture should start. | ||
This way it is possible to e.g. capture the traffic of an IP address starting from an hour ago. | This way it is possible to e.g. capture the traffic of an IP address starting from an hour ago. | ||
The capture will also continue with live traffic. | The capture will also continue with live traffic. | ||
If the user interface is in '''back-in-time''' mode (a timespan from the past is selected) starting a capture will produce a | If the user interface is in '''back-in-time''' mode (a timespan from the past is selected) starting a capture will produce a dialogue asking to confirm that the capture will cover exactly the timespan selected. | ||
The capture will automatically stop after the selected timespan has been processed. | The capture will automatically stop after the selected timespan has been processed. | ||