SYNOPSIS

Input

[Gets input from a network interface]

Output

Stream containing a single field of packet type.

DESCRIPTION

This tool collects packets from a live network.

OPTIONS

Sniffer device

Sets the device that packets will be collected from.

Note
The following options applies only to ksniffer devices.
Discard ACKs

If this is enabled the ksniffer will discard TCP ACK-only packets; this is ACK packets without payload.

Network

If a network in in CIDR notation (eg. 192.168.1.0/24) or IP address/netmask notation (eg. 192.168.1.0/255.255.255.0) is entered here, the ksniffer will only record packets originating from or arriving to the given network.

Port

If a port number is entered here the ksniffer will only record packets to and from the given port number.

Note
The following options applies only to devices with loadbalance algorithm enabled on the interfaces.
Feeds = 1

If this option is selected all packets will arrive in one thread

Feeds = 2 or more

If 2 or more feeds are selected the interface is commanded to calculate a hash key from the IP and port number and distribute traffic evenly to the number of feeds selected.

Additional Packets from network.

Additional packets from network placed on the canvas, will suggest to duplicate the setting from the initial packet from network tool, thereby distributing traffic across several threads or CPU's. The parallel processed treads can be merged using the merge function at any time. For best performance delay the merge process for as long as possible.