Ethernet capture

From WICE Wiki v2.89
Revision as of 10:53, 15 June 2021 by Henrik (talk | contribs) (Made image viewable)
Jump to navigation Jump to search
Creating an Ethernet capture assignment

The ethernet capture assignment and module can capture ethernet traffic from interfaces on the WCU in a format known as pcap. This is standarized format of saving packet information and can be used in many tools to be analyzed. As there can be a lot of traffic on ethernet interfaces, there is an option to enter a filtering expression (Capture expression) to only capture certain packets of interest. Examples and descriptions of filter expressions can be found here and here.

To create an assignment of this type you need to at least enter the interface which you would like to capture from using the "Ethernet interface" drop-down selector at the top. Only interfaces available for the current platform will show. In the section "Capture expression" you simply enter the expression for capturing packets. Depending on the installation at your site, there might be a button for validating the expression "Validate expression". Press this to validate the expression. If this is not available, you could use any local tool available to you to validate the capture expression. Examples of such tools are tcpdump and wireshark.

When done, simply press "Submit & Close" to get the assignment down to the WCU.

As said earlier, results from the captured data on the WCU is delivered as pcap files. This is a standardized binary format for captured ethernet packets. One of the most widely used tools to analyze such data is wireshark which is available for most computer platforms.