Packet ring buffer: Difference between revisions

no edit summary
No edit summary
No edit summary
Line 116: Line 116:
* Action: What shall be done with the matching packets.
* Action: What shall be done with the matching packets.


– Snapshot length: The packet is captured with a max length as specified in the input field below. If the packet is larger, the remaining bytes will be discarded.
:– Snapshot length: The packet is captured with a max length as specified in the input field below. If the packet is larger, the remaining bytes will be discarded.
 
:– Discard: Discard the whole packet.
– Discard: Discard the whole packet.
:– Full: The whole packet is captured.
 
:– Header + data: Capture just certain parts of the packet. When selecting '''L3 header''', layer 2 and layer 3 headers are stored.  
– Full: The whole packet is captured.
 
– Header + data: Capture just certain parts of the packet. When selecting '''L3 header''', layer 2 and layer 3 headers are stored.  
:When selecting '''L3 + L4 header''', layer 2, 3 and 4 headers are stored.  
:When selecting '''L3 + L4 header''', layer 2, 3 and 4 headers are stored.  
:When selecting '''L3 + L4 + L7 data''', an input field is shown where the length of layer 7 data can be configured.  In this case layer 2, 3 and 4 are stored together with the specified amount of layer 7 data.
:When selecting '''L3 + L4 + L7 data''', an input field is shown where the length of layer 7 data can be configured.  In this case layer 2, 3 and 4 are stored together with the specified amount of layer 7 data.
1,775

edits