FAQ: Difference between revisions

downloading and uploading PCAPs, streaming captured data to the device for analysis and so on. The Management

interface actively participates in the network it is connected to.

==== How can I monitor the traffic of a single computer? ====

The easiest way of monitoring and analyzing the traffic of a single device like a computer is to configure the

Allegro Network Multimeter in bridge mode. The device to be monitored is connected to one interface of a bridged pair

network to which the device would normally be connected to directly.

network while providing full insight into the traffic between the device and the network.

==== What is the difference between bridge mode and sink mode? ====

If the Allegro Network Multimeter is configured to sink mode, all Monitor interfaces act similar in a way that they just

where the traffic is already a copy like when running on a mirror port of a switch or on a network traffic tap.

interfaces while at the same time analyzing the forwarded traffic. The device acts as a network bridge and can just

be connected in between two networking devices that would normally be connected directly to each other. This mode

is suited for inserting the device directly into a point of the network without the need of a separate network

traffic tap or other means of providing a copy of the network traffic.

==== I have used the LAN Management interface but I do not know the leased IP. How can I get the assigned IP address? ====

'''  DHCP server  '''

If the used DHCP server provides some kind of log output or an overview of devices for which IP address leases have

been granted, it might help to search for a device with a hostname that starts with 'allegro-mm-' followed by a four

DHCP lease and should be traceable in the DHCP server info.

''' WIFI '''

When access to the user interface is established, the IP address of the LAN Management interface can be found under

'Settings' -> 'Management Interface settings' in the 'Active interfaces' section.

'''  Display '''

management network IP addresses is displayed. On the 200 model the

display must be connected before starting the device to get output.

'''  KVM '''

the 1000 or 3000 series. Please see the FAQ entry 'What can I do with

the integrated KVM port?' on how to get started.

==== What can I do with the integrated KVM port? ====

Please refer to the documentation from Supermicro on how to use the KVM/IPMI management module:

[https://www.supermicro.com/manuals/other/IPMI_Users_Guide.pdf SMT_IPMI_Manual].

==== I do not have a WIFI client and I do not have a DHCP server. How can I access the Allegro Network Multimeter? ====  

Once access to the user interface is established, a permanent static IP address can be configured under 'Settings' ->

'Management Interface settings'.

== ''' Data protection''' ==

==== What kind of user data is stored on the Allegro Network Multimeter ====

with physical access to the storage devices, it is possible to format the storage device with industry-standard full

disk encryption.

==== How can I reset the Allegro Network Multimeter to a default configuration? ====

packet ring buffer data or captured files from internal or external

storage.

==''' System behavior '''==

==== Where does the Allegro Network Multimeter display L1 issues like bad CRC frames? ====

statistics are available on the 'Interface stats' page in the 'Errors' column. For an explanation of the error

counters, please refer to the [[4-_Interface_statistics|Interface statistics]] manual page.

==== What happens in case of a system overload? ====

When the Allegro Network Multimeter is operating in bridge mode and packets cannot be processed due to a system

overload, a software bypass will ensure that these packets are still forwarded to the adjacent Monitoring interface.

==== What happens if the maximum number of stored connections has been reached? ====

lies before a certain point in time. This cutoff time is constantly adjusted to provide the best possible use of the

available memory. For how far back-in-time historical statistics are currently available, can be reviewed on the

'Info' -> 'System Info' page.

==== I can only see the traffic of the last day. How can I increase this period? ====

'Store connection information for every IP' and 'Store traffic history graph for IP peers' settings can help saving

a lot of memory.

==== What happens to the data after shutdown, reboot, or restart processing? ====

processing is stopped. It is possible to reanalyze the packet ringbuffer, but

this will interrupt the 'live' mode, so no new packets will be processed.

== ''' Allegro hardware''' ==

==== What types of SFP modules are supported? ====

This depends on which SFP+ ports are used. The following table shows what kind of modules are supported in which

ports:

restrictions do not apply to the additional network extension cards

(2 port and 4 port SFP+, high precision GPS card, etc.) that are available for

generic modules from a wide range of vendors.

may be necessary to manually set the correct speed in the `Interface Stats`

section of the user interface.

== ''' Bypass''' ==

==== What bypass options are available? ====

* a quad-port RJ45 1Gbps copper option supporting 1000BaseT and 100BaseT speeds. Each pair of interfaces makes up a bridged link with bypass.

* a dual-port 10Gbps fiber option with builtin SR transceivers and LC connectors. The two interfaces make up a bridged link with bypass.

==== How does the bypass work? ====

If the device is operating in sink mode, the bypass interfaces will act just like all the other interfaces on the device

and the bypass will never be activated.

== ''' User interface''' ==

==== What does the question mark on packets/bytes counters mean? ====

This value is shown to avoid confusion about unexpected values due to

interactive graph zooming.

==== How can I print statistics? ====

"Shrink to fit" option (Firefox) or use a smaller scaling than 100% (Chrome).

You can also use another page orientation and change between "landscape" or "portrait".

== ''' Packet ring buffer''' ==

==== Which time stamps are used during packet ring buffer replay? ====  

Packet ring buffer replay will use the original time stamps of the packets as they were captured. Therefore the replay

recreates the original sequence and timing of packets in the displayed statistics.

== ''' Capturing''' ==

==== How many captures can be used in parallel? ====