Ethernet capture - Revision history

Loe.Lindstrom: /* Pre-trigger duration (Since 2.67) */

2022-08-31T13:08:08Z

Pre-trigger duration (Since 2.67)

← Older revision		Revision as of 13:08, 31 August 2022
Line 13:		Line 13:

	=== Pre-trigger duration (Since 2.67) ===		=== Pre-trigger duration (Since 2.67) ===
	For WCUs with version 2.67 or later it is also possible to add a pre-trigger duration. By adding this, the traffic before the start trigger will be captured~~. How much before is given by the pre-trigger duration. I.e. if the pre-trigger is set to 20 seconds~~, the ~~traffic happening from 20 seconds before the start trigger up until the start-trigger will also be captured and saved~~.		For WCUs with version 2.67 or later it is also possible to add a pre-trigger duration. By adding this the traffic before the start trigger will also be captured, for the amount of time specified.

	== Analyzing Results ==		== Analyzing Results ==
	The results from the captured data on the WCU is delivered as pcap files. This is a standardized binary format for captured ethernet packets. One of the most widely used tools to analyze such data is [https://www.wireshark.org/ wireshark] which is available for most computer platforms.		The results from the captured data on the WCU is delivered as pcap files. This is a standardized binary format for captured ethernet packets. One of the most widely used tools to analyze such data is [https://www.wireshark.org/ wireshark] which is available for most computer platforms.

Loe.Lindstrom: /* Analyzing Results */

2022-08-31T12:46:06Z

Analyzing Results

← Older revision		Revision as of 12:46, 31 August 2022
Line 16:		Line 16:

	== Analyzing Results ==		== Analyzing Results ==
	Th results from the captured data on the WCU is delivered as pcap files. This is a standardized binary format for captured ethernet packets. One of the most widely used tools to analyze such data is [https://www.wireshark.org/ wireshark] which is available for most computer platforms.		The results from the captured data on the WCU is delivered as pcap files. This is a standardized binary format for captured ethernet packets. One of the most widely used tools to analyze such data is [https://www.wireshark.org/ wireshark] which is available for most computer platforms.

Loe.Lindstrom at 12:42, 31 August 2022

2022-08-31T12:42:30Z

← Older revision		Revision as of 12:42, 31 August 2022
Line 1:		Line 1:
	~~[[File:Screenshot from 2021-04-01 08-53-12.png\|thumb\|Creating an Ethernet capture task\|782x782px]]~~
	The ethernet capture task and module can capture ethernet traffic from interfaces on the WCU in a format known as [[wikipedia:Pcap\|pcap]]. This is a standarized format of saving packet information and can be used in many tools to be analyzed. As there can be a lot of traffic on ethernet interfaces, there is an option to enter a filtering expression (Capture expression) to only capture certain packets of interest. Examples and descriptions of filter expressions can be found [https://biot.com/capstats/bpf.html here] and [https://www.comparitech.com/net-admin/pcap-guide/ here].		The ethernet capture task and module can capture ethernet traffic from interfaces on the WCU in a format known as [[wikipedia:Pcap\|pcap]]. This is a standarized format of saving packet information and can be used in many tools to be analyzed. As there can be a lot of traffic on ethernet interfaces, there is an option to enter a filtering expression (Capture expression) to only capture certain packets of interest. Examples and descriptions of filter expressions can be found [https://biot.com/capstats/bpf.html here] and [https://www.comparitech.com/net-admin/pcap-guide/ here].
			[[File:Screenshot from 2021-04-01 08-53-12.png\|thumb\|Creating an Ethernet capture task\|350x350px]]

	== Ethernet interface and capture expression ==		== Ethernet interface and capture expression ==

Loe.Lindstrom: /* Triggers (Since 2.66) */

2022-08-31T12:34:58Z

Triggers (Since 2.66)

← Older revision		Revision as of 12:34, 31 August 2022
Line 1:		Line 1:
	[[File:Screenshot from 2021-04-01 08-53-12.png\|thumb\|Creating an Ethernet capture task\|782x782px]]		[[File:Screenshot from 2021-04-01 08-53-12.png\|thumb\|Creating an Ethernet capture task\|782x782px]]
	The ethernet capture task and module can capture ethernet traffic from interfaces on the WCU in a format known as [[wikipedia:Pcap\|pcap]]. This is standarized format of saving packet information and can be used in many tools to be analyzed. As there can be a lot of traffic on ethernet interfaces, there is an option to enter a filtering expression (Capture expression) to only capture certain packets of interest. Examples and descriptions of filter expressions can be found [https://biot.com/capstats/bpf.html here] and [https://www.comparitech.com/net-admin/pcap-guide/ here].		The ethernet capture task and module can capture ethernet traffic from interfaces on the WCU in a format known as [[wikipedia:Pcap\|pcap]]. This is a standarized format of saving packet information and can be used in many tools to be analyzed. As there can be a lot of traffic on ethernet interfaces, there is an option to enter a filtering expression (Capture expression) to only capture certain packets of interest. Examples and descriptions of filter expressions can be found [https://biot.com/capstats/bpf.html here] and [https://www.comparitech.com/net-admin/pcap-guide/ here].

	=== Ethernet interface and capture expression ===		== Ethernet interface and capture expression ==
	To create a task of this type you need to at least enter the interface which you would like to capture from using the "Ethernet interface" drop-down selector at the top. Only interfaces available for the current platform will show. In the section "Capture expression" you simply enter the expression for capturing packets. Depending on the installation at your site, there might be a button for validating the expression "Validate expression". Press this to validate the expression. If this is not available, you could use any local tool available to you to validate the capture expression. Examples of such tools are [https://www.tcpdump.org/manpages/tcpdump.1.html tcpdump] and [https://www.wireshark.org/ wireshark].		To create a task of this type you need to at least enter the interface which you would like to capture from using the "Ethernet interface" drop-down selector at the top. Only interfaces available for the current platform will show. In the section "Capture expression" you simply enter the expression for capturing packets. Depending on the installation at your site, there might be a button for validating the expression "Validate expression". Press this to validate the expression. If this is not available, you could use any local tool available to you to validate the capture expression. Examples of such tools are [https://www.tcpdump.org/manpages/tcpdump.1.html tcpdump] and [https://www.wireshark.org/ wireshark].

	When done, simply press "Submit & Close" to get the task down to the WCU.		When done, simply press "Submit & Close" to get the task down to the WCU.

	=== ~~Triggers~~ (Since 2.66) ===		== Triggers ==

			=== Start- and stop-triggers (Since 2.66) ===
	It is possible to add trigger expressions that will start and/or stop the task. To do this, check the box "Enable Triggers". Use the buttons "Start trigger..." and "Stop trigger..." to add a start and stop trigger expression. Note that the signals that are used in the start and stop trigger expressions '''must''' be measured by the signal reader assignment on the WCU/s in question. It is possible to leave the Stop Trigger blank, but a Start Trigger must be supplied. It is also possible to set how long the capture should undergo after the Start trigger expression has been met by using the Max Duration field.		It is possible to add trigger expressions that will start and/or stop the task. To do this, check the box "Enable Triggers". Use the buttons "Start trigger..." and "Stop trigger..." to add a start and stop trigger expression. Note that the signals that are used in the start and stop trigger expressions '''must''' be measured by the signal reader assignment on the WCU/s in question. It is possible to leave the Stop Trigger blank, but a Start Trigger must be supplied. It is also possible to set how long the capture should undergo after the Start trigger expression has been met by using the Max Duration field.

	=== Analyzing Results ===		=== Pre-trigger duration (Since 2.67) ===
	~~As said earlier,~~ results from the captured data on the WCU is delivered as pcap files. This is a standardized binary format for captured ethernet packets. One of the most widely used tools to analyze such data is [https://www.wireshark.org/ wireshark] which is available for most computer platforms.		For WCUs with version 2.67 or later it is also possible to add a pre-trigger duration. By adding this, the traffic before the start trigger will be captured. How much before is given by the pre-trigger duration. I.e. if the pre-trigger is set to 20 seconds, the traffic happening from 20 seconds before the start trigger up until the start-trigger will also be captured and saved.

			== Analyzing Results ==
			Th results from the captured data on the WCU is delivered as pcap files. This is a standardized binary format for captured ethernet packets. One of the most widely used tools to analyze such data is [https://www.wireshark.org/ wireshark] which is available for most computer platforms.

Loe.Lindstrom: changed word "assignment" to "task" where I think it's applicable. Perhaps I missed one?

2021-11-26T11:05:06Z

changed word "assignment" to "task" where I think it's applicable. Perhaps I missed one?

← Older revision		Revision as of 11:05, 26 November 2021
Line 1:		Line 1:
	[[File:Screenshot from 2021-04-01 08-53-12.png\|thumb\|Creating an Ethernet capture ~~assignment~~\|782x782px]]		[[File:Screenshot from 2021-04-01 08-53-12.png\|thumb\|Creating an Ethernet capture task\|782x782px]]
	The ethernet capture ~~assignment~~ and module can capture ethernet traffic from interfaces on the WCU in a format known as [[wikipedia:Pcap\|pcap]]. This is standarized format of saving packet information and can be used in many tools to be analyzed. As there can be a lot of traffic on ethernet interfaces, there is an option to enter a filtering expression (Capture expression) to only capture certain packets of interest. Examples and descriptions of filter expressions can be found [https://biot.com/capstats/bpf.html here] and [https://www.comparitech.com/net-admin/pcap-guide/ here].		The ethernet capture task and module can capture ethernet traffic from interfaces on the WCU in a format known as [[wikipedia:Pcap\|pcap]]. This is standarized format of saving packet information and can be used in many tools to be analyzed. As there can be a lot of traffic on ethernet interfaces, there is an option to enter a filtering expression (Capture expression) to only capture certain packets of interest. Examples and descriptions of filter expressions can be found [https://biot.com/capstats/bpf.html here] and [https://www.comparitech.com/net-admin/pcap-guide/ here].

	=== Ethernet interface and capture expression ===		=== Ethernet interface and capture expression ===
	To create ~~an assignment~~ of this type you need to at least enter the interface which you would like to capture from using the "Ethernet interface" drop-down selector at the top. Only interfaces available for the current platform will show. In the section "Capture expression" you simply enter the expression for capturing packets. Depending on the installation at your site, there might be a button for validating the expression "Validate expression". Press this to validate the expression. If this is not available, you could use any local tool available to you to validate the capture expression. Examples of such tools are [https://www.tcpdump.org/manpages/tcpdump.1.html tcpdump] and [https://www.wireshark.org/ wireshark].		To create a task of this type you need to at least enter the interface which you would like to capture from using the "Ethernet interface" drop-down selector at the top. Only interfaces available for the current platform will show. In the section "Capture expression" you simply enter the expression for capturing packets. Depending on the installation at your site, there might be a button for validating the expression "Validate expression". Press this to validate the expression. If this is not available, you could use any local tool available to you to validate the capture expression. Examples of such tools are [https://www.tcpdump.org/manpages/tcpdump.1.html tcpdump] and [https://www.wireshark.org/ wireshark].

	When done, simply press "Submit & Close" to get the ~~assignment~~ down to the WCU.		When done, simply press "Submit & Close" to get the task down to the WCU.

	=== Triggers (Since 2.66) ===		=== Triggers (Since 2.66) ===
	It is possible to add trigger expressions that will start and/or stop the ~~assignment~~. To do this, check the box "Enable Triggers". Use the buttons "Start trigger..." and "Stop trigger..." to add a start and stop trigger expression. Note that the signals that are used in the start and stop trigger expressions '''must''' be measured by the signal reader assignment on the WCU/s in question. It is possible to leave the Stop Trigger blank, but a Start Trigger must be supplied. It is also possible to set how long the capture should undergo after the Start trigger expression has been met by using the Max Duration field.		It is possible to add trigger expressions that will start and/or stop the task. To do this, check the box "Enable Triggers". Use the buttons "Start trigger..." and "Stop trigger..." to add a start and stop trigger expression. Note that the signals that are used in the start and stop trigger expressions '''must''' be measured by the signal reader assignment on the WCU/s in question. It is possible to leave the Stop Trigger blank, but a Start Trigger must be supplied. It is also possible to set how long the capture should undergo after the Start trigger expression has been met by using the Max Duration field.

	=== Analyzing Results ===		=== Analyzing Results ===
	As said earlier, results from the captured data on the WCU is delivered as pcap files. This is a standardized binary format for captured ethernet packets. One of the most widely used tools to analyze such data is [https://www.wireshark.org/ wireshark] which is available for most computer platforms.		As said earlier, results from the captured data on the WCU is delivered as pcap files. This is a standardized binary format for captured ethernet packets. One of the most widely used tools to analyze such data is [https://www.wireshark.org/ wireshark] which is available for most computer platforms.

Henrik at 09:06, 15 June 2021

2021-06-15T09:06:26Z

← Older revision		Revision as of 09:06, 15 June 2021
Line 7:		Line 7:
	When done, simply press "Submit & Close" to get the assignment down to the WCU.		When done, simply press "Submit & Close" to get the assignment down to the WCU.

	=== Triggers ===		=== Triggers (Since 2.66) ===
	It is possible to add trigger expressions that will start and/or stop the assignment. To do this, check the box "Enable Triggers". Use the buttons "Start trigger..." and "Stop trigger..." to add a start and stop trigger expression. Note that the signals that are used in the start and stop trigger expressions '''must''' be measured by the signal reader assignment on the WCU/s in question. It is possible to leave the Stop Trigger blank, but a Start Trigger must be supplied. It is also possible to set how long the capture should undergo after the Start trigger expression has been met by using the Max Duration field.		It is possible to add trigger expressions that will start and/or stop the assignment. To do this, check the box "Enable Triggers". Use the buttons "Start trigger..." and "Stop trigger..." to add a start and stop trigger expression. Note that the signals that are used in the start and stop trigger expressions '''must''' be measured by the signal reader assignment on the WCU/s in question. It is possible to leave the Stop Trigger blank, but a Start Trigger must be supplied. It is also possible to set how long the capture should undergo after the Start trigger expression has been met by using the Max Duration field.

	=== Analyzing Results ===		=== Analyzing Results ===
	As said earlier, results from the captured data on the WCU is delivered as pcap files. This is a standardized binary format for captured ethernet packets. One of the most widely used tools to analyze such data is [https://www.wireshark.org/ wireshark] which is available for most computer platforms.		As said earlier, results from the captured data on the WCU is delivered as pcap files. This is a standardized binary format for captured ethernet packets. One of the most widely used tools to analyze such data is [https://www.wireshark.org/ wireshark] which is available for most computer platforms.

Henrik: Added Info about Triggers

2021-06-15T09:05:28Z

Added Info about Triggers

← Older revision		Revision as of 09:05, 15 June 2021
Line 2:		Line 2:
	The ethernet capture assignment and module can capture ethernet traffic from interfaces on the WCU in a format known as [[wikipedia:Pcap\|pcap]]. This is standarized format of saving packet information and can be used in many tools to be analyzed. As there can be a lot of traffic on ethernet interfaces, there is an option to enter a filtering expression (Capture expression) to only capture certain packets of interest. Examples and descriptions of filter expressions can be found [https://biot.com/capstats/bpf.html here] and [https://www.comparitech.com/net-admin/pcap-guide/ here].		The ethernet capture assignment and module can capture ethernet traffic from interfaces on the WCU in a format known as [[wikipedia:Pcap\|pcap]]. This is standarized format of saving packet information and can be used in many tools to be analyzed. As there can be a lot of traffic on ethernet interfaces, there is an option to enter a filtering expression (Capture expression) to only capture certain packets of interest. Examples and descriptions of filter expressions can be found [https://biot.com/capstats/bpf.html here] and [https://www.comparitech.com/net-admin/pcap-guide/ here].

			=== Ethernet interface and capture expression ===
	To create an assignment of this type you need to at least enter the interface which you would like to capture from using the "Ethernet interface" drop-down selector at the top. Only interfaces available for the current platform will show. In the section "Capture expression" you simply enter the expression for capturing packets. Depending on the installation at your site, there might be a button for validating the expression "Validate expression". Press this to validate the expression. If this is not available, you could use any local tool available to you to validate the capture expression. Examples of such tools are [https://www.tcpdump.org/manpages/tcpdump.1.html tcpdump] and [https://www.wireshark.org/ wireshark].		To create an assignment of this type you need to at least enter the interface which you would like to capture from using the "Ethernet interface" drop-down selector at the top. Only interfaces available for the current platform will show. In the section "Capture expression" you simply enter the expression for capturing packets. Depending on the installation at your site, there might be a button for validating the expression "Validate expression". Press this to validate the expression. If this is not available, you could use any local tool available to you to validate the capture expression. Examples of such tools are [https://www.tcpdump.org/manpages/tcpdump.1.html tcpdump] and [https://www.wireshark.org/ wireshark].

	When done, simply press "Submit & Close" to get the assignment down to the WCU.		When done, simply press "Submit & Close" to get the assignment down to the WCU.

			=== Triggers ===
			It is possible to add trigger expressions that will start and/or stop the assignment. To do this, check the box "Enable Triggers". Use the buttons "Start trigger..." and "Stop trigger..." to add a start and stop trigger expression. Note that the signals that are used in the start and stop trigger expressions '''must''' be measured by the signal reader assignment on the WCU/s in question. It is possible to leave the Stop Trigger blank, but a Start Trigger must be supplied. It is also possible to set how long the capture should undergo after the Start trigger expression has been met by using the Max Duration field.

			=== Analyzing Results ===
	As said earlier, results from the captured data on the WCU is delivered as pcap files. This is a standardized binary format for captured ethernet packets. One of the most widely used tools to analyze such data is [https://www.wireshark.org/ wireshark] which is available for most computer platforms.		As said earlier, results from the captured data on the WCU is delivered as pcap files. This is a standardized binary format for captured ethernet packets. One of the most widely used tools to analyze such data is [https://www.wireshark.org/ wireshark] which is available for most computer platforms.

Henrik: Made image viewable

2021-06-15T08:53:00Z

Made image viewable

← Older revision		Revision as of 08:53, 15 June 2021
Line 1:		Line 1:
	[[File:Screenshot from 2021-04-01 08-53-12.png\|thumb\|Creating an Ethernet capture assignment]]		[[File:Screenshot from 2021-04-01 08-53-12.png\|thumb\|Creating an Ethernet capture assignment\|782x782px]]
	The ethernet capture assignment and module can capture ethernet traffic from interfaces on the WCU in a format known as [[wikipedia:Pcap\|pcap]]. This is standarized format of saving packet information and can be used in many tools to be analyzed. As there can be a lot of traffic on ethernet interfaces, there is an option to enter a filtering expression (Capture expression) to only capture certain packets of interest. Examples and descriptions of filter expressions can be found [https://biot.com/capstats/bpf.html here] and [https://www.comparitech.com/net-admin/pcap-guide/ here].		The ethernet capture assignment and module can capture ethernet traffic from interfaces on the WCU in a format known as [[wikipedia:Pcap\|pcap]]. This is standarized format of saving packet information and can be used in many tools to be analyzed. As there can be a lot of traffic on ethernet interfaces, there is an option to enter a filtering expression (Capture expression) to only capture certain packets of interest. Examples and descriptions of filter expressions can be found [https://biot.com/capstats/bpf.html here] and [https://www.comparitech.com/net-admin/pcap-guide/ here].

Jonas: Added an explanation of the new ethernet capture assignment type.

2021-04-01T07:20:13Z

Added an explanation of the new ethernet capture assignment type.

← Older revision		Revision as of 07:20, 1 April 2021
Line 1:		Line 1:
	The ethernet capture assignment and module can capture ethernet traffic from interfaces in the WCU in a format known as ~~PCAP~~.		[[File:Screenshot from 2021-04-01 08-53-12.png\|thumb\|Creating an Ethernet capture assignment]]
			The ethernet capture assignment and module can capture ethernet traffic from interfaces on the WCU in a format known as [[wikipedia:Pcap\|pcap]]. This is standarized format of saving packet information and can be used in many tools to be analyzed. As there can be a lot of traffic on ethernet interfaces, there is an option to enter a filtering expression (Capture expression) to only capture certain packets of interest. Examples and descriptions of filter expressions can be found [https://biot.com/capstats/bpf.html here] and [https://www.comparitech.com/net-admin/pcap-guide/ here].

			To create an assignment of this type you need to at least enter the interface which you would like to capture from using the "Ethernet interface" drop-down selector at the top. Only interfaces available for the current platform will show. In the section "Capture expression" you simply enter the expression for capturing packets. Depending on the installation at your site, there might be a button for validating the expression "Validate expression". Press this to validate the expression. If this is not available, you could use any local tool available to you to validate the capture expression. Examples of such tools are [https://www.tcpdump.org/manpages/tcpdump.1.html tcpdump] and [https://www.wireshark.org/ wireshark].

			When done, simply press "Submit & Close" to get the assignment down to the WCU.

			As said earlier, results from the captured data on the WCU is delivered as pcap files. This is a standardized binary format for captured ethernet packets. One of the most widely used tools to analyze such data is [https://www.wireshark.org/ wireshark] which is available for most computer platforms.

Jonas: Created page with "The ethernet capture assignment and module can capture ethernet traffic from interfaces in the WCU in a format known as PCAP."

2021-04-01T06:45:01Z

Created page with "The ethernet capture assignment and module can capture ethernet traffic from interfaces in the WCU in a format known as PCAP."

New page

The ethernet capture assignment and module can capture ethernet traffic from interfaces in the WCU in a format known as PCAP.