You are on page 1of 32

c  c





÷  

à 

   


c  c



 
m 

  
 
 
 
  

Ú Alll  l
 
  

c  c



 
Úm 
M m 
    l  
 

M llyll   ly



c  c



 
÷   Ã 

Ú M interface     y   m M
interface M 
       y 
  !   
      M M  y m
 y m 
  
M "ll  l      
  l 

     #  y  
     #  y  l 
  "ll 
l 
     #"m 
ll  
Ú capture filter expression Ally l   
Mcapture
  $ l"
  ll ly     

   ll ly     
 %mm

Ú
snaplen Ally  l  l      
M
snaplen
m  
 Y   l  "  y"  


Y   
 ll    
m  lY
 lY  &''('
&''(' y"   l 
l         ll l
y
Ú M mllm 
         m ll m 

mllm
 ly      y    m 
  "
  "  l  
Ú type Ally  l
y l  
!  
Mtype
 M
M l
 l  l
y   y   
Ú   m 
 ll l    y ll 
M  m
     "  "            
 !    ly       M M l y 
l y 
         y    m 
  
       ll ly ly    
    lAl"y   l   m 
 
 "  ll  ly yl l  
Ú M 0  l
y   y      !  
0
 y   "m 
ll       
M     
    
c  c



 
÷  Ã 

Ú count   l  


      $
M count
 l"y ly  )**
yl  y
 l"y ly  )**
yl  yM 
M 
Ú M test:value      l m 
  
test:value
  lm      
 |Y| "  
|Y| "

Y
 |   ll l       

Y ll l
   l " l+ll l+
l " l+ll l+

l y     

÷ Ã  Ã 

Ú number of ring buffer files [:duration]    M


Mnumber M  "  
 "  
m 
       lm 
  

    

 
  ll
 l           
 l     +"     MM  " 
ll
 "
    l  lllll"ll    l
  l  %"    

Y   *" 
  

Y  *"
 lm 
ll  l  " ll ly    
+    
A  l     l   m 

ll   l           l m 
ll      l yllm l       
    l       !   lyl  
l        Ñ
  Ñ ÷ ,
Ú M file è     l
file
c  c



 
Ú m 


÷-. $l. 
/ 
 
÷  . .$01A(*÷2)3'&4÷52A72&&$3)3''$6
$ )7))4 y "))4 y  8
Alm -2"**(-)4-)&)(45***
m  l 
-**********  
m    -**********  
$  -)

0  -))4 y
÷0  -))4 y
3332*(3  
  ------79 8
 -**-*'-' --7-'(70
0-7-'(8
0  -)**
0 l0
÷ l
 A-7**8
9-  l
A-7**8
÷è9-÷ 
÷ ll -" :7**(8
*****:     
)):    

;  


-
 7*4***8
   
-)
*******'' 7'(**&4**<=  
**)**(**&****4********>
****4'***********'' 7'(4**2**è<= 
**(***&4'44)'474''4()))))))mAè3m)??????
**4*))4)('('(&(54((*4)44'('()()??A''&59*A93'))
**'*4(4'(54(4)(4(*(*(*(*(44((7(&((2÷35÷A4****4÷7&2
**&*(((**** *********'' 7'(4*****(<= 
**7**)*)
c  c



 
Ú m 
lll + 
M      


+    "     "| Y"


|

÷-. $l. 
/ 
M @+" 
†   
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
 l% y  
$l- 
  -'&* y-))'((
  -'&* y-))'((
 -''2 y-))'**'
  -'( y-)*(2(
 -) y-()'
 -2 y-45&

 -4 y-&&7
  -'*' y-)*4&
 -)*7 y-2)752
ll  - y-2
 - y-2
 - y-2
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
c  c



 
c  c



 
Ú  l   y l
+"" l["l<["l<["l<

::::::::::::::::::::::::::::::::::::::::::
,  
 l-(***** 
÷l A*- 
÷l A)- @)*)2)5)(*
B÷l A*B÷l A)
m  B  B y B  B y
******(***** 2 '274 * *
(*****&***** 42 )2)*4 2 52
&*****5***** ))7) 2&75( 5 )*44
5*****)***** )47 5(774 )* ))&*
)*****)'***** )(77 )*()4 & &5&
)'*****)2***** )2 2)5&(& 4 4&4
)2*****)***** )('7 )*24* 2 52
)*****4***** )'27 ))&5' )* ))&*
4*****7***** )'&' )75*&)  (
7*****(****** )4'* 525'5 7 2)
(******((***** )4(& )*)5) 4 4&4
((*****(&***** )2& )2542 7 2)
(&*****(5***** ')7 42)4* * *
::::::::::::::::::::::::::::::::::::::::::
c  c



 
Ú ÷    
C 
      @+  ""D @)&'*&4&2D
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
4÷  
$l- @)&'*&4&2
BE BB/B BmlB B$ 9yB B$ 9yB
)&'*&4&2E/)5)&2)' 2' 2227 52 )5**7 7254
)&'*&4&2E/)5)&2(7 &5 7*7& 4 2''' )'&()
)&'*&4&2E/)5)&2( &* &*&4 4 75' &4 &2'5
)&'*&4&2E/)5)&2) ') 4&27  4'( ')4*
)&'*&4&2E/)5)&2*)7( (' (2'5 )& (*55 &5'2
)&'*&4&2E/)5)&2)45 )5 )75) & 445( &24
)&'*&4&2E/)5)&2)* )2 5(( * (2' &72'
)&'*&4&2E/)5)&2))* 5 &'7 5 )'7 (5)4
)&'*&4&2E/)5)&275 2&4  '47 () &((&
)&'*&4&2E/)5)&2*)'( * )27) 5 (&'2 ''5
)&'*&4&2E/)5)&24))'* ' (42 ( (42 &5&
)&'*&4&2E/)5)&242 ) (7* )' (4'5 '25
)&'*&4&2E/)5)&2)5 )4 )4'4 )( 4&* (5)4
)&'*&4&2E/)5)&2)2' )* )*27 )7 '5*7 &554
)&'*&4&2E/)5)&2)*( )& )&5* )* )7'5 (445
)&'*&4&2E/)5)&2()5 )7(' & )57( ' (7*2
)&'*&4&2E/)5)&27)( )*2 )) 4)'' 4 '(&(
)&'*&4&2E/)5)&2*)7 )) ))( ) *54 ()7
)&'*&4&2E/)5)&2)) )2 )7' ' ))'* 5*
c  c



 
Ú 
0   

÷-./ 
 ))   @+l "

::::::::::::::::::::::::::::::::::::::::::::::::::::

0   l    


0   &&4*7* ***)5(
*)5 * ******* ***F
*(5 * ******* ***F
4*75 4544'& ****5& 744&F
2*)'5 ))44&( ****( )74F
)&*()5 )&))7 *****() 4(F
(*&(5 )('2( *****& *'F
&4*)75 ('57 ******7 *'4F
)2*''5 )2'4 *****4( (5F
'&*'))5 * ******* ***F
')* * ******* ***F
::::::::::::::::::::::::::::::::::::::::::::::::::::
c  c



 
Ú   m

÷-./ 
   @+ "
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
   l    

   4( ***)4)'
)4''4)&*(7 * ****&'2 4&')F
m÷ )5 ****&' 5'**F
2* )5 ****&' )****F
 ) *****(( '**F
'( ) *****(( )****F
&'*22( )2 ****'5 4)2&F
m÷ )2 ****'5 )****F
((7 )2 ****'5 )****F
)4''(*( ) *****(( ((F
 ) *****(( )****F
(**5 ) *****(( )****F
)&(5'555 4 ****)( 5(*F
m÷ 4 ****)( )****F
((7) 4 ****)( )****F
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
c  c



 
Ú 
  y÷l 
Ú [  m ll  l   
  l    
 y

÷-./ 
  
)*******)4''4)&*(7/&'*22(
((7/2*[ !< @:*0 :*G :)4&*
*5))()*&'*22(/)4''4)&*(7
2*/((7[ !"A÷H< @:*A
:) :'24*
0 :*G :)(2*
(*5))()*)4''4)&*(7/&'*22(
((7/2*[A÷H< @:)A
:) :5&&*0 :*
c  c



 
Ú   

÷-./ 
)   @+"
::::::::::::::::::::::::::::::::::::::::::::::::
  
   -(7
    -*
I  ÷  ly

4*7yA    è@ -)

**,H-)*

)**my -4

)2*è  -

I0 è@   
 m3-5

9!3-

A÷H-5

c  c



 
Ú %'÷ 
÷-./ 
0 l+ @+ '"  
::::::::::::::::::
%'G è ÷ 
::::::::::::::::::
èA G-
÷ll  ll -
- )
ll   - )
  - )
l - )
::::::::::::::::::::::::::::::::::::::
c  c



 
Ú %'  è m 

  + '"["l<

Ú A  %'      " %'


 è m 7 èm8   
èA  yJ    "   "  èm
 J    @7   y
   8J    @J  l 
3      l
 ly+  y   
  y 
      l  ly l  
 
c  c



 
Ú G y÷ l lè mly
  +  " ["l<

Ú m G y÷ l l7G÷8


    
    y
   ll      

     "
y    y    ly7èm8
    G÷" 
l @  "@
  "     
  y@
c  c



 
Ú G9è m
C 
ll    @+ "
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
G9èmm  -
$l-
÷   ÷ll G èmm Gèmm Aèmm
,  ) ***)2& ***)2& ***)2&
÷l 4 ****( ***)7& ****&&
m  ' ***)5* )(&5)72 7&4(*
, A K ) ***4'* ***4'* ***4'*
è A K (*5 ****' **)2&' ***4)
m    7 ***))7 *)4&*) **(4
 l 2 ****& **74') **&
  A K )& ****2 **)52 ***'72
0A K ) ****74 ***27 ***'2
m÷  A K 7 ****2) ***(55 ***)5*
m÷A K 4 ****5 ***7* ***)(

m   ÷   ÷ll G èmm Gèmm Aèmm


$0$è m ) *)555( *)555( *)555(
L3è!0$ 0$,  ****( ***42 ***)('
L3è!0$030$,  ****4* ***'') ***5&
mm   ÷   ÷ll G èmm Gèmm Aèmm
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
c  c



 
Ú G9  y     
Ú   + " 

Ú A   G9 ly   ly


 y  7 8   @
  y lly    
      m    
l     y  
    
"  
    l l 

   l 
c  c



 
Ú 9,,m  
Ú   + ""[l<

C 
 @ll   + ""

::::::::::::::::::::::::::::::::::::::::::::::
9,,m   l
9,,m, '(-%÷Gmy-
%÷Gmy 

   74
A÷H 7'
èl )*
AH 2
 l  '
è@ )''
  )2))
, 75
::::::::::::::::::::::::::::::::::::::::::::::
c  c



 
Ú %mm  

Ú   + ""[l<
::::::::::::::::::::::::::::::::::::::::::::::::::::
%mm  
I%mm ÷  ly

%mm4*2è@m 
%mm(*)G    ly
%mm(*G m ly
%mm(*4G 
%mm**,H
%mm*&l÷  
%mm)**÷  
%mm4*($  
%mm4*4$
I0%mmè@   
3Aè÷%((&
3m)447
, m2
%3A
::::::::::::::::::::::::::::::::::::::::::::::::::::
c  c



 
Ú %mmm  

÷-./ 
H A*)**   @+ "

::::::::::::::::::::::::::::::::::::::::::::::::::::::
%mm
÷  l    

ml%mm
 2*&7 ***)'*4
%mmè@
 )75( ****((4 (F
3Aè÷% ((& *****&( )274F
3m )447 ****7* 2*7*F
, m 2 ******) *4'F
%3A  ******* *))F
%mmè 
 )5& ****4 )&*7F
MMM- 
  * ******* ***F
)-   l )) *****( 5(4F
)**÷   )) *****( )****F
-   &25 ****)2 '()&F
**,H &2' ****)2 554F
*&l÷   4 ******) *'2F
(-è    475 *****25 (&5&F
(*4G   4' *****24 54(&F
(*$ 4 ******4 '*)F
(*)G  ( ******) *&(F
4-÷l 3 7 ******) *'4F
4*2è@m  4 ******) '7)4F
4*4$  ) ******* )45F
4*($     ******* 2'7F
'- 3 * ******* ***F
, %mm
 4572 ****52 &)7)F
::::::::::::::::::::::::::::::::::::::::::::::::::::::
c  c



 
Ú %mmè@  

÷-./ 
H A*)**  M @+ 0@""D @
&&*7&*)'*
::::::::::::::::::::::::::::::::::::::::::::::::
%mmè@ l    

%mmè@ y%mm% (' ****7'7
 
y   (' ****7'7 )****F
    ( *****&' 2'7F
      *****4( '7)F
     2 ****)7( 2&F
 l 4 *****27 ))4(F
  l
0    )4 ****(*( 4***F
 
 ) ***** 2&F
     *****4( '7)F
 l   ) ***** 2&F
:::::::::::::::::::::::::::::::::::::::::::::::
c  c



 
Ú [  
Ú     
 l 
 l
  l  
 l  # l
 J ly   
  l   
 ll 
 
l
Ú è'*'*7 
c  c



 
Ú G 
M      ll   l
M G   l  l
       l  "
  "l0Aly+"A "
G 
G " l

  "A ll '  " 

   ,  5

c  c



 
Ú M        l  
  l         "
 
   l     l l 
   
  
Ú M$y     l$
 l"y   l     
        l"yl 
 M
M$  
Ú M    l   "   
Ú M l     l       
  l
l    l ll 
  
Ú Mmy  
 l y  
lm  ly   l y  
l" yll  
Ú M  
      
   l  l
Ú Ml 
 l    ll  
 m  @    l
c  c



 
Ú m 
M   l y  
A ÷    l    
   l  l
  l     
 l ll
"  l  
l 
M   ')(')'
c  c



 
Ú ÷ 
M     l 
 l    

"
+"   
    l
  
       
 
l"    
      "  
 @
 y  
l   
c  c



 
Ú M   l   "   
Ú M ly  ly   
 
 l " l l  
  
Ú M ly   
   l
Ú M ly ll  ll 
  l
   y
Ú Mly  l     
Ú Mly   
Ú Mly    
Ú Mly    y  
Ú Mly      
Ú Mly 
+  y
c  c



 
Ú   
M     l
   l  lm 
ly l     
l l m 
"   
 l  l y l
  m    
   ly ll "    
   l l  yy 
    ll 
c  c



 
Ú Mtest:value       l         
 lm      lyM m 

Ú Mnumber of ring buffer files [:duration]    M "       
   lm      lyM m 

Ú Mbuffer size Al l ly  y "    ll   

        
m      lyM 
m 

Ú M count   l  
      m    
  lyM  m 

Ú M      ll l    y "     ly
M m 

Ú Mcapture filter expression Ally l      "
    lyM m 

Ú M         l "   
Ú Minterface     y   "     lyM
 m 

Ú M0  l
y   y      "   
  lyM m 

Ú Mmll            "     lyM 
m 

Ú M
snaplen Ally  l  l       "   
  lyM
 m 

Ú M          
Ú Mfile  
 l    ll   "     ly
M m 

Ú Mtype Ally  l
y l  
"     ly
M m 

c  c



 
Ú  y
M  
    J
   
  l   "  "
   l   l