M86 Security M86 Threat Analysis Reporter, Руководство пользователя

Страница: 151 / 938

WF G
LOBAL
A
DMINISTRATOR
S
ECTION
C
HAPTER
1: S
YSTEM SCREEN
M86 S
ECURITY
U
SER
G
UIDE
123
Use the Troubleshooting Mode
1. Click Enable to begin working in the troubleshooting
mode.
2. In the Packet Logging frame, select the Packet Logging
Time from the available selections (10 seconds, 30
seconds, 60 seconds). This time is the interval during
which the server captures packets in real time, ranging
from the moment the command is executed until the
designated point of time in the future.
3. At the Capture Device field, the default listening device
for the operation mode displays. If necessary, make a
selection from the pull-down menu that corresponds to
the operation mode used on the network—”LAN2” or
“LAN1”.
4. At the Promiscuous Mode field, the default choice (“on”
or “off”) displays, based on the operation mode that was
selected. The promiscuous mode is a mode of operation
in which each data packet that is sent will be received
and read by the Network Interface Card (NIC).
5. If necessary, click the appropriate radio button to indicate
whether to turn the promiscuous mode on or off. If “on” is
selected, the Web Filter will watch all network traffic as in
the invisible mode. If “off” is selected, the Web Filter will
only capture packets sent to or from the Web Filter.
6. At the Capture String/Rule field, select the type of
packets to be captured: Transmission Control Protocol
(TCP); packets destined to a specified port (80, 443, 81);
packets destined to the Web Filter; packets sent to or
from port 20 or 21; packets sent to the Virtual IP
address’s port 137 or 139, or Address Resolution
Protocol (ARP).
7. Click Execute to display results in the Result list box.