115  VoIP Subscriber Gateways 
 
3.3.3  The ‘Kernel’ submenu 
Use the submenu to view circular kernel buffer. 
 
 
3.3.4 The ‘PCAP Traces’ submenu 
The submenu makes it possible to  capture network traffic from active interfaces  of  a 
device. 
The ‘Start traces’ section: 
‐  Interface — a selector field used for assigning the interface for network traffic 
capturing (only active interfaces are displayed); 
‐  Filter — network traffic filtering rules; 
‐  The  ‘Start’  button  —  a  button  to  start  network  traffic  capturing.  If  traffic 
capturing  has  been  started  successfully,  the  following  message  is  displayed: 
«TCP-dump for interface `<ifacename>` is started. Otherwise, the message will 
be like: «Can't start tcpdump». In most cases this is due to entering an incorrect 
filter into the ‘Filter’ field; 
‐  The ‘Stop’ button — a button to stop network traffic capturing. 
 
The ‘Dump files’ section contains the list of files that can be unloaded by pressing the 
file name in the ‘Name’ field. Unnecessary files can be removed by pressing ‘Remove’. 
 
Filter expression structure: 
Each expression that specifies a filter includes one or more primitives that consist of one 
or more object identifiers and classifiers preceding them.  Object’s name or number can serve 
as identifier. 
 
Object classifiers: 
1. type – specifies the type of the object assigned by the identifier. The type may accept 
the following values: