L7 module: Difference between revisions

remove duplicates
(fix layout)
(remove duplicates)
Line 80: Line 80:


The configuration tab allows to define additional custom protocols. Based on IP addresses or subnets or port ranges, up to 128 different custom protocols may be defined which are shown as regular layer 7 protocols in the statistics described in the previous sections.
The configuration tab allows to define additional custom protocols. Based on IP addresses or subnets or port ranges, up to 128 different custom protocols may be defined which are shown as regular layer 7 protocols in the statistics described in the previous sections.
These custom protocols can be used to track specific services or IP addresses. It also possible to capture traffic specific to those protocols or define filters.
These custom protocols can be used to track specific services or IP addresses. It also possible to capture traffic specific to those protocols or define filters.
 
Keep in mind that statistics are always accounted regarding their protocol ID so when changing a configuration for a specific ID, all previous statistics for that ID will still be available even if the IP/port combination would not have matched on the old traffic. It is recommended to restart the packet processing after modifying existing definitions.


Each protocol consists of the following parameters:
Each protocol consists of the following parameters:
Line 107: Line 109:


Either IP addresses or ports may be left empty, but if both are defined, they must match together. So for a specific packet the source or destination IP must match any entry in the list of IP addresses and the source or destination port must match any entry in the list of ports.
Either IP addresses or ports may be left empty, but if both are defined, they must match together. So for a specific packet the source or destination IP must match any entry in the list of IP addresses and the source or destination port must match any entry in the list of ports.
=== Web interface ===
The configuration tab allows to configure the custom protocols.
Each of the 128 elements can be configured individually.
Keep in mind that statistics are always accounted regarding their protocol ID so when changing a configuration for a specific ID, all previous statistics for that ID will still be available even if the IP/port combination would not have matched on the old traffic. It is recommended to restart the packet processing after modifying existing definitions.
To edit a protocol definition, click on the pencil symbol at the right hand side of the table. A definition can be cleared by clicking on the trash symbol.
The current configuration can be downloaded via the corresponding button and a previously saved configuration can be uploaded too. Make sure to save the configuration after importing a configuration to make it active.
==== Editing a protocol ====
The configuration mask for a specific protocol allows to change the parameters described above.
* Layer 4 drop down box: Select the layer 4 protocol from the list of possible values.
* IPs: use the 'plus' button to enter a new IP or IP mask. Use the 'minus' button to remove that corresponding ling.
* Ports: Similar to IPs, add or remove lines configuring the ports to match.


=== Examples ===
=== Examples ===