100 SBC session border controllers
Traces
4.1.10.1 PCAP traces
The menu is used to configure parameters for network traffic analysis and TDM network protocols.
Traces –> PCAP traces
TCP-dump — TCP–dump utility settings:
– Interface — interface for network traffic capture;
– Capture length limit (0 — no limit) — size limit for captured packets, in bytes;
– Add filter — packet filter for tcpdump utility.
Structure of filter expressions
Each expression that defines the filter includes a single or multiple primitives containing a single or multiple
object identifiers and preceding qualifiers. Object identifier may be represented by its name or number.
Object qualifiers
1. type — indicates the object type specified by identifier. Object type may be represented by
the following values:
– host,
– net,
– port.
If object type is not defined, host value will be assumed.
2. dir — defines the direction towards the object. The following values are supported:
– src (the object is a sender),
– dst (the object is a recipient),
– src or dst (a sender or a recipient),
– src and dst (a sender and a recipient).
If dir qualifier is not defined, src or dst value will be assumed.
For traffic interception from artificial interface any, qualifiers inbound and outbound
may be used.