340
edits
Packet ring buffer: Difference between revisions
→Packet ring buffer snapshot length filter
(→Packet ring buffer: mention packets dropped since start) |
|||
| Line 107: | Line 107: | ||
|} | |} | ||
==== Packet ring buffer | ==== Packet ring buffer filter ==== | ||
Rules can be configured to control the snapshot length of each packet which will be stored in the packet ring buffer. | Rules can be configured to control the snapshot length of each packet which will be stored in the packet ring buffer. | ||
These rules can also be used to prevent certain packets from being stored in the packet ring buffer. | These rules can also be used to prevent certain packets from being stored in the packet ring buffer. | ||
| Line 119: | Line 119: | ||
This means that the most generic rule should be at the bottom of the list (like e.g. ‘all packets will be discarded’) and more specific rules should be higher up in the list (like e.g ‘packets with an IP matching 192.168.1.0/24 will be fully captured’). | This means that the most generic rule should be at the bottom of the list (like e.g. ‘all packets will be discarded’) and more specific rules should be higher up in the list (like e.g ‘packets with an IP matching 192.168.1.0/24 will be fully captured’). | ||
When creating a filter rule, a dialogue is displayed and allows the following options: | |||
When creating a | |||
* Rule condition: Specify which packets to match. | * Rule condition: Specify which packets to match. | ||