G
ATEWAY
C
ONTROLLER
S
ERIES
U
SER
M
ANUAL
2011, VALUEPOINT NETWORKS, INC. ALL RIGHTS RESERVED
P
AGE
74
OF
124
provide a robust response to their threatening takedown letters, it may be less likely that
they will throttle or cancel your connection, disrupting your business.
Subscriber Connection Logging
Connection Logging Functionality Select Enable to record every session opened by
subscribers.
Packet Types
Select the Packet Types to record. Most traffic is TCP based,
but some file sharing uses UDP as well.
TFTP Server
You must provide a TFTP server on the WAN port to receive the
logs. Make sure your TFTP server is configured to accept files
from the Controller WAN IP address.
Connection Log Contents
The Controller automatically records every subscriber connection internally. After about 15k
records the log is compressed and processed with User IDs and sent to the TFTP server. If
the TFTP server is unavailable, the Controller will try three times to send the file, after that
the file is lost because the internal log is filling again and must be processed. If the
Controller is restarted the current log, of whatever size, is automatically sent.
The compressed Connection Log is about 100-200KB. Uncompressed it is about 1.5MB.
The compression is gZip, so any typical compression tool should open it. A single site will
generate from a few Megabytes up to a Gigabyte of compressed logs per day, so plan
storage according to how busy your sites are and how long you plan to keep the logs.
The Log itself is a .csv containing the following fields:
Timestamp – Date and Time of session
Open/Stop – Marks the beginning or end of the session
PktType – Packet Type
SrcIP – Source IP
SrcPort – Source Port
DstIP – Destination IP
DstPort – Destination Port
Reply SrcIP – Reply Source IP
Reply SrcPort – Reply Source Port
