325
edits
Capturing: Difference between revisions
no edit summary
Remco.derooy (talk | contribs) No edit summary |
Remco.derooy (talk | contribs) No edit summary |
||
| Line 42: | Line 42: | ||
== How can I extract traffic from the past? == | == How can I extract traffic from the past? == | ||
With the Allegro Network Multimeter -packet ring buffer-, it is possible to extract traffic from the past as a pcap file. The packet ring buffer is stored on the internal storage device of an Allegro Network Multimeter (if your model is equipped with one), or on an | With the Allegro Network Multimeter -packet ring buffer-, it is possible to extract traffic from the past as a pcap file. The packet ring buffer is stored on the internal storage device of an Allegro Network Multimeter (if your model is equipped with one), or on an externally attached USB storage device. A fast USB3.x capable SSD is recommended. A USB thumb drive can also be used, but some burst packets may be dropped if the thumb drive write speed is too slow. | ||
You can see an overview about all storage devices that can be used for the Allegro Multimeter under 'Generic' -> 'Storage'. | You can see an overview about all storage devices that can be used for the Allegro Multimeter under 'Generic' -> 'Storage'. | ||
| Line 53: | Line 53: | ||
suitable for the ring buffer a warning will pop up prompting you to format the disk. | suitable for the ring buffer a warning will pop up prompting you to format the disk. | ||
After formatting or activating, the storage page will display information | After formatting or activating, the storage page will display information | ||
on disk | on disk usage and an overview of all files on the disk. | ||
{| | {| | ||
| Line 75: | Line 75: | ||
When the packet ring buffer is created and running, the "Packet ring buffer" | When the packet ring buffer is created and running, the "Packet ring buffer" | ||
statistics page displays information about the ring buffer | statistics page displays information about the ring buffer usage and several | ||
graphs restored or filtered traffic are also displayed. A filter can be applied | graphs restored or filtered traffic are also displayed. A filter can be applied | ||
to determine which packets are stored in the ring buffer. Check out the chapter | to determine which packets are stored in the ring buffer. Check out the chapter | ||
| Line 108: | Line 108: | ||
== Create complex captures with several criteria == | == Create complex captures with several criteria == | ||
Captures can be | Captures can be started with complex filter expressions for a specific capture of e.g. | ||
an IP address or a Layer 7 protocol. | an IP address or a Layer 7 protocol. | ||