Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revision | |||
| en:li_settings [2016/04/03 14:01] – aalekseenko | en:li_settings [Unknown date] (current) – removed - external edit (Unknown date) 127.0.0.1 | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | The system allows to record the traffic for selected protocols in PCAP format. It can save metadata of HTTP requests in log files. | ||
| - | To record the data in PCAP format: please use the following parameters in configuration file / | ||
| - | < | ||
| - | ajb_save_udpi=1 | ||
| - | ajb_save_udpi_proto=OSPFIGP: | ||
| - | ajb_udpi_path=/ | ||
| - | ajb_save_ip=192.168.0.0/ | ||
| - | </ | ||
| - | Here: | ||
| - | ajb_save_udpi=1 - activate the traffic recording for a list of protocols\\ | ||
| - | ajb_udpi_path=/ | ||
| - | ajb_save_udpi_proto=OSPFIGP: | ||
| - | ajb_save_ip=192.168.0.0/ | ||
| - | |||
| - | To record HTTP requests' | ||
| - | < | ||
| - | ajb_save_url=-1 | ||
| - | ajb_save_url_format=ts: | ||
| - | ajb_url_path=/ | ||
| - | </ | ||
| - | Here:\\ | ||
| - | ajb_save_url=-1 - activate recording of HTTP metadata\\ | ||
| - | ajb_url_path=/ | ||
| - | ajb_save_url_format=ts: | ||
| - | < | ||
| - | ts - is a time stamp | ||
| - | prg - is: id of the active services at the moment of request | ||
| - | login - subscriber' | ||
| - | ipsrc - subscriber' | ||
| - | ipdst - host IP address (that of the request' | ||
| - | host - the host name (Host field) | ||
| - | path - the path to the requested resource (URI) | ||
| - | ref - from where (Referer field) | ||
| - | uagent - browser' | ||
| - | cookie - Cookie | ||
| - | </ | ||
| - | |||
| - | To record SIP requests' | ||
| - | < | ||
| - | ajb_save_sip=1 | ||
| - | ajb_sip_ftimeout=15 | ||
| - | ajb_sip_path=/ | ||
| - | ajb_save_sip_format=ts: | ||
| - | </ | ||
| - | here\\ | ||
| - | ajb_save_sip=1 activate the SIP metadata recording in a file\\ | ||
| - | ajb_sip_path==/ | ||
| - | ajb_sip_ftimeout=15 record timeout between files\\ | ||
| - | ajb_save_sip_format=ts: | ||
| - | < | ||
| - | ts - time stamp | ||
| - | ssid - session identifier (it's used to link to Netflow/ | ||
| - | ipsrc - subscribers' | ||
| - | ipdst - server IP | ||
| - | login - subscribers' | ||
| - | msg - message type | ||
| - | scode - status-code | ||
| - | from - phone/ | ||
| - | to - phone/ | ||
| - | callid - call identifier | ||
| - | uagent - type of handset (User-Agent) | ||
| - | </ | ||
| - | If you set the configuration parameter | ||
| - | < | ||
| - | ajb_reserved=1 | ||
| - | </ | ||
| - | the memory for a buffer is allocated in advance (on DPI start) and you can start and stop data recording on the run. You only need to change parameters ajb_save_url, | ||