TSP Lab GyTapperC − Packet Capture Software GyTapperC

Packet Capture Software for C-Board-like devices
("GyTapperC")

Table of Contents

Features

Connections of the GyTapperC module

User interface

The main menu

Menu Menuitem Shortcut(s) Meaning
[Log]
  Find line containing... (Ctrl-F) Finds text in log window
  Find next matching line (F3) Finds next occurrence of text in log window
  Details   Detail level of logging (Off, Normal, Detailed, or Debug)
  Flush status line counters now!   The status line counters can be flushed
  Flush and zero status line counters now!   The status line counters can be flushed and cleared
[Capture]
  Start/Stop capturing (Ctrl-S or ) Capturing can be enabled or disabled
  Reload input device (port)list (Ctrl-I) Input device (port) list can be reloaded
[Monitors]
  Zero all Rx counters   Rx counters can be cleared
  Syntax-check list   Monitor list can be syntax-checked
  Reload list   Monitor list can be reloaded
  Allow auto-connect (Ctrl-A or ) Enables automatic connection to the monitors
  Terminate all connections gracefully   Closes connections properly
  Abort all connections immediately(!!!BRUTAL!!!)   Tears down connections immediately by breaking low layer sockets
[Options]
  Auto scroll ( ) Allow automatic scrolling of the log screen
  Show log (Ctrl-Tab) Shows log screen
  Show monitors (Ctrl-Tab) Shows monitor screen
  Save settings   Saves actual settings into the configuration (INI) file

Buttons

Button Action
Disables/enables capturing ([Capture] / Start/Stop capturing menu item)
Disables/enables automatic connection to the monitors ([Monitors] / Allow auto-connect menu item)
Opens the status page of the web-interface in the deafult web browser
Disables/enables automatic scrolling of the log screen ([Options] / Auto scroll menu item)

The bottom status-line

Details of "Monitors" window

The popup menu of the "Monitors" window

Right-click on a row on the "Monitors" window to access this menu!
  Menuitem Shortcut(s) Meaning
  Zero Rx counters   Rx counters can be cleared
  Terminate this connection gracefully   Closes this connection properly
  Abort this connection immediately (!!!BRUTAL!!!)   Tears down this connection immediately by breaking low layer sockets

Logging

Available on a separate page.

The web-interface

 Available on a separate page.

Distribution filtering rules

 Available on a separate page.

Stats and events

 Available on a separate page.

IP address names

 Available on a separate page.

Configuration (GyTapperC.ini) file settings
Section Entry Example Meaning
[Position]
  iLeft 4 Position of the program module on the display screen
  iTop 4 Position of the program module on the display screen
  iWidth 1032 Position of the program module on the display screen
  iHeight 776 Position of the program module on the display screen
[Options]
  bAutoScroll True Scrolls automatically the log window
[Capture]
  wInputPort#0..9 3000 Input can be a C-Board, C-GEP or Packet Distributor
  sInputLinkID#0..9 #00 Input device identifier used in statistics about the traffic of the interface sent to Monitor Poller
  dwAutoStartWithDelay 4 Start of capturing is delayed with this value, given in seconds
[Monitors]
  bAllowAutoConnect True Enables automatic connections to the monitors
  wAutoConnectIntervalSec 3 Period of automatic (re-)connection
  dwMonitorMaxCount 25 Number of available monitor connections can be limited; default value is 50
[Sga-7N Poller]
  sLocalIPAddress 10.111.0.110 This local IP address is used as local address during the Poller connection
  sRemoteIPAddress 10.112.0.103 IP address of the Poller machine
  sRemoteTCPPort 7001 TCP port of the Poller machine
  sSendThisTapperName TP0 Tapper optionally sends a 3-character ID when connecting to a Monitor (or TapperPoller) (default is empty, which means not to send an ID)
  wConnectRetryDelaySec 5 Retrial period for establishing the Poller connection
[Web Interface]
  byDebug 1 If "1" then the HTTP requests are logged at Debug log level
  wLocalTCPPort 8069 TCP port number where the web-interface accepts the connection
  sURLForLogs http://$$:8080/LogFiles URL where "LogFiles" folder is available. "$$" will be replaced with IP address of the machine. "8080" is the TCP port of the FTP server. "LogFiles" is the log file folder defined in the FTP server.
[Advanced]
  wLogDetailLevel 3 Detail level of logging (Off, Normal, Detailed, or Debug)
  dwMaxLinesInLogWindow 1000 Number of lines in the log window on screen
  sCaption Tapper1 Alternative caption text for easy distinguishing amongst multiple instances of this module
  sLogFilesPath c:\LogFiles Path for the log files
  sIPAddrNames2file IPAddrNames2.csv Data file that contains IP address and name assignments
[Monitor 'MN1']
  sRemoteIPAddress 10.113.0.75 IP address of the Monitor
  wRemoteTCPPort 7001 TCP port of the Monitor
  sLocalIPAddress 10.111.0.99 Alternative local IP address assignment for the Monitor connection
  sSendThisTapperName TP0 Tapper optionally sends a 3-character ID when connecting to a Monitor (or TapperPoller) (default is empty, which means not to send an ID)
  bTCPKeepAlive True TCP KeepAlive feature in the direction of the connected Monitor (default is True)
  bEncryptAllTraffic True Encryption (256-bit key AES in CBC mode) in the direction of the connected Monitor (default is False)
  L52 10.123.133.143 --- 10.134.133.156 : 9876 --- * Defines the source and destination IP addresses and port values for which filtering will be done and the result will be forwarded with LinkID="L52".
Detailed explanation of filtering can be found in the Distribution filtering rules section.
[Monitor 'NUL' 1]
  OTX 219.239.59.104 --- 10.255.28.230 Packets fitting in this rule are simple dropped.

Version history