7
Protecting Your Digital Assets
TM
Ditto Network Tap Module User Manual
3.3.2 Live Capture Settings
When enabled, this service runs continuously in the background and streams captured data in realtime
over the network to a remote monitor using the third-party Wireshark network protocol analyzer. See
Section 4.1.1 for more information.
•
Auto Start:
Set this value to ‘Enabled’ to turn on live capture as soon as the Network Tap Module
is powered on. Set this value to ‘Disabled’ if you want the user to choose when to start the live
capture service in the Browser Interface.
•
Port:
This is the port that the Network Tap Module uses to talk to the third-party network protocol
analyzer software. The default port is 2002.
•
Username:
The username used by the third-party network protocol analyzer software.
•
Password:
The password used by the third-party network protocol analyzer software.
3.3.3 Advanced Settings
•
Buffer Size:
Sets the the buffer size used by the Network Tap Module during a network capture
action. The minimum size is 512K (kilobytes). The default size of 16M (megabyte) works best for
most use cases. Click the
Information icon
for more information.
•
MTU:
If you are using the Network Tap Module on a network that’s confi gured to a non-standard
maximum transmission unit size (e.g. it uses jumbo frames), then set this fi eld to match that value.
Most Ethernet LANs will use the standard MTU of 1500. The commonly accepted range for a valid
MTU is 68 to 65,535 as defi ned in RFC 791. Click the
Information icon
for more information.
•
Link Speed:
Allows you to set the Ethernet connection speed throughput. In most cases, ‘Auto
Negotiate’ will work. If you experience problems staying connected, you may need to change the
speed to match what your network’s capabilities are.
3.4 USING AND CONFIGURING NETWORK CAPTURE FILTERS
Insert the SD Card containing your network capture fi lter(s) into the Network Tap Module and your custom
network capture fi lters will become available in the “Network Capture Filter” drop-down box when con-
fi guring a “Network Capture” action. You may also add subdirectories that contain one or more network
capture fi lter XML fi les to the DittoNetCapFilter directory.
To add or edit your own network capture fi lter, choose the way that works best for your usage scenario.
3.4.1 Filter Creation Via Web Browser
a. Insert the SD Card into the SDCard slot on the rear of the Network Tap Module.
b. Using the Browser Interface, select
Network Capture
from the “Action to Perform” drop-down
box.
c. If you are editing an existing network capture fi lter that you created, select it from the “Network
Capture Filter” drop-down box.
d. Type in the ports you wish to capture in your network capture fi lter in the text box directly below the
“Network Capture Filter” drop-down box (see Figure 3). Use the word ‘or’ to separate each port.
e. Click the
Save button
. The “Save Network Capture Filter” dialog box will pop up (see Figure 4).
