1. Manuals
  2. Brands
  3. Endace Manuals
  4. Computer Hardware
  5. DAG 3.7D
  6. User manual

Endace DAG 3.7D User Manual

Card
Hide thumbs Also See for DAG 3.7D:
Table of Contents

Advertisement

Quick Links

Download this manual
DAG 3.7D Card User Guide
EDM01-16

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the DAG 3.7D and is the answer not in the manual?

Questions and answers

Related Manuals for Endace DAG 3.7D

Summary of Contents for Endace DAG 3.7D

  • Page 1 DAG 3.7D Card User Guide EDM01-16...
  • Page 2 Endace and any named company, or any sponsorship or endorsement by any named company. Use of the Endace products described in this document is subject to the Endace Terms of Trade and the Endace End User License Agreement (EULA).

  • Page 3: Table Of Contents

    Starting a capture session ..........................31 dagsnap ................................32 Capturing data at high speed ..........................33 Viewing captured data ............................34 dagbits .................................. 34 Converting captured data ............................36 Dagconvert................................37 ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...
  • Page 4 Generic ERF Header ..............................52 ERF 1. TYPE_POS_HDLC ............................54 ERF 3. TYPE_ATM ..............................55 Extension Headers (EH) ............................56 Introduction ................................ 56 Troubleshooting Reporting Problems ..............................57 Version History ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 5: Introduction

    Introduction Overview The Endace DAG 3.7D card provides the means to transfer data at the full speed of the network into the memory of the host PC, with zero packet loss in even worst-case conditions. Further, unlike a Network Interface Card (NIC), Endace products actively manage the movement of network data into memory while only consuming a minimal amount of the host computer's resources.

  • Page 6: System Requirements

    Operating System This document assumes you are installing the DAG 3.7D card in a computer which already has an operating system installed. To install refer to EDM04-01 DAG Software Installation Guide. All related documentation is included on the CD shipped with the DAG 3.7D card.

  • Page 7: Card Description

    EDM01-16v5 DAG_3.7D_Card_User_Guide Card Description The DAG 3.7D card has two DS3/E3 co-axial interfaces each of which are able to receive and transmit. It is capable of capturing 100% of traffic at full line rate over ATM, HDLC, frame relay and channelized networks.

  • Page 8: Card Architecture

    Clock Time (page All packet records are written to host PC memory during capture operations. The diagram below shows the DAG 3.7D card's major components and flow of data: ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 9: Line Types

    Line Types It is important that you understand the physical characteristics of the network to which you want to connect. If your configuration settings do not match your network, the DAG 3.7D card will not function as expected. There are various Ethernet line speeds and corresponding protocols which are identified using the IEEE naming convention.

  • Page 11: Installation

    3-4 DAG cards in the same computer. DAG Software package The latest DAG Software package must be installed before you install the DAG 3.7D card itself. See EDM04-01 DAG Software Installation Guide, which is included on the CD shipped with the DAG 3.7D card.

  • Page 12: Port Connectors

    EDM01-16v5 DAG_3.7D_Card_User_Guide Port Connectors The DAG 3.7D has four coaxial SMB connectors consisting of two pairs. One connector in each pair is used for the receive signal and the other connector of each pair is used for the transmit signal as shown below: Note: The DAG 3.7D firmware does not currently support transmission.

  • Page 13: Coaxial Transceivers

    75Ω SMB to 75 Ω BNC 1m cables which are supplied with the card. Connecting to the Network You can connect the DAG 3.7D to the network using either a router or a DXS-3 tap. Depending upon which method you are using you will need to configure your connection as shown below:...

  • Page 15: Configuring The Dag Card

    • DS3 Kentrox subrate There are two FPGA images shipped as standard with the DAG 3.7D card. One is for use with full line rate capture and the other is for use with E3 fractional capture. However the Kentrox subrate is a proprietary application. If you wish to use this you should contact Endace Technical Support at support@endace.com...

  • Page 16: Full Line Rate Configuration

    EDM01-16v5 DAG_3.7D_Card_User_Guide Full Line Rate Configuration Configuring the DAG 3.7D card for full line rate capture will enable you to capture data at the full speed of the network. E3 Fractional Configuration Configuring the DAG 3.7D card for fractional capture allows you to capture data from a fractional network.

  • Page 17: Setting Up The Fpga

    (where "0" is the device number of the DAG card you wish to capture data from). The filename of the FPGA image may differ from the above depending on the version required. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 18: Dagrom

    EDM01-16v5 DAG_3.7D_Card_User_Guide dagrom is a software utility that enables you to configure the FPGA on Endace DAG cards. dagrom The following is a list of options available in dagrom Option Description Use alternate (stable) half. [Default is current half.] Factory / User.

  • Page 19: Loading New Firmware Images Onto A Dag Card

    Before configuring the DAG 3.7D card you must run the following command to dagconfig set the default parameters in the DAG card. This ensures the DAG 3.7D card functions correctly once you begin capturing data. Ensure you run this command each time the FPGA is reprogrammed.

  • Page 20: Configuring The Dag Card

    -d0 default_ds3_atm Note: Enabling the pre-amplifier using adds approx 20dB of linear rx_monitor amplification for monitor applications where the signal has been reduced 20dB with resistive tap circuits. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...
  • Page 21 –d0 default_e3_atm Note: Enabling the pre-amplifier using adds approx 20dB of linear rx_monitor amplification for monitor applications where the signal has been reduced 20dB with resistive attenuator tap circuits. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...
  • Page 22 –d0 default_e3_hdlc Enabling the pre-amplifier using adds approx 20dB of linear Note: rx_monitor amplification for monitor applications where the signal has been reduced 20dB with resistive tap circuits. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...
  • Page 23 –d0 default_e3_hdlc_fract Enabling the pre-amplifier using adds approx 20dB of linear Note: rx_monitor amplification for monitor applications where the signal has been reduced 20dB with resistive attenuator circuits. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...
  • Page 24 –d0 default_kentrox Enabling the pre-amplifier using adds approx 20dB of linear Note: rx_monitor amplification for monitor applications where the signal has been reduced 20dB with resistive tap circuits. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 25: Dagconfig Tokens Explained

    Configure the card for DS3 ATM. Example dagconfig default_ds3_atm default_ds3_hdlc Configure the card for DS3 HDLC. Example dagconfig default_ds3_hdlc default_e3_atm Configure the card for E3 ATM. Example dagconfig default_e3_atm ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...
  • Page 26 CBIT framing mode. Example dagconfig ds3_cbit ds3_cbit_if CBIT IF framing mode. Example dagconfig ds3_cbit_if ds3_cbit_ef CBIT EF framing mode. Example dagconfig ds3_cbit_ef ds3_cbit_ff CBIT FF framing mode. Example dagconfig ds3_cbit_ff ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...
  • Page 27 ATM/HDLC processing block. Example dagconfig e3_cc e3_g751 E3 framing mode (same as above e3). Example dagconfig e3_g751 e3_g751_if E3 IF framing mode. Example dagconfig e3_g751_if ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...
  • Page 28 A number out of 95 specifying the number of timeslots used by whatever is sending the data. This is used with the fractional e3 hdlc firmware. Example dagconfig fract=95 ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...
  • Page 29 The type of PCI used by the DAG card (PCI, PCIx or PCIe) Bus speed • Bus width • Example pcix 133MHz 64-bit 33MHz 32-bit pcie 8 Gbs 4Lane reset Resets the ethernet framers, set auto mode. Example dagconfig -d0 reset ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...
  • Page 30 Alternatively if you want to ensure you capture the whole packet you can set the length to a larger value. Example Setting up a DAG 3.7D card with a snap length of 200 bytes: dagconfig -d0 slen=200 Note: The ERF header is not included in the value.
  • Page 31 EDM01-16v5 DAG_3.7D_Card_User_Guide varlen/novarlen The DAG 3.7D card is able to capture packets in two ways. They are: • Variable length capture ( varlen Fixed length capture ( ) - (not support on some firmware images) • novarlen In variable length (...

  • Page 32: Dagconfig Options

    Sets the verbosity level, from 0 (basic) to 3 (full). -v,--verbose <level> Display the DAG card version information. -V,--version Note: For cards with more than 2 ports you can select the required port using: - (portnumber) or --(portletter). ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 33: Dagthree Options

    DAG Software release 3.2 onwards. It has been dagthree replaced with . Both are still valid. Endace recommends that new customer use dagconfig dagconfig is a software utility used to configure and display statistics.

  • Page 34: Viewing The Dag Card Status

    Note: “1” indicates the condition is present on the link “0” indicates the condition is not present on the link. Port RLOL Status Conditions Interface statistics are the DAG 3.7D are the same for all firmware versions. Note: A definition of each of the status conditions is described below: Condition Definition...

  • Page 35: Using Your Dag Card To Capture Data

    To stop, use CTRL+C. You can also configure By default, dagsnap dagsnap to run for a fixed time period then exit. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 36: Dagsnap

    2. The buffer occupancy. Small values indicate no packet loss. 3. The rate at which data is currently being written. Display version information. -V, --version Delay(wait) in seconds before capture and after. -w,--wait SEC ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 37: Capturing Data At High Speed

    EDM01-16v5 DAG_3.7D_Card_User_Guide Capturing data at high speed As the DAG 3.7D card captures packets from the network link, it writes a record for each packet into a large buffer in the host computer’s main memory. To avoid packet loss, the user application reading the record, such as...

  • Page 38: Viewing Captured Data

    (page dagbits Note: decodes and displays ERF header fields and packet contents are displayed dagbits as a Hex dump only. To decode higher level protocols, Endace recommends using a third party application, see Using third party applications (page Examples Test live traffic on dag0, stream 0 for 60 seconds running the lctr, flags and fcs tests:...
  • Page 39 Available tests dagbits include monotonic time-stamp increment and frame checksum (FCS, aka CRC) validation. See the help for further details. dagbits ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 40: Converting Captured Data

    SUNATM DLT, which includes VPI/VCI information. The following example shows how to use to achieve this: dagconvert dagconvert -v -i atm.erf -o atm_filtered.erf -y SUNATM -b "vpi 10 and vci 12" ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 41: Dagconvert

    DOCSIS : Ethernet CHDLC : HDLC PPP_SERIAL : HDLC MTP2 : HDLC ATM_RFC1483 : ATM, AAL5 SUNATM : ATM, AAL5 Note: Not all options are applicable to all DAG cards. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 42: Using Third Party Applications

    The third party applications include: Wireshark /Tshark (formerly Ethereal /Tethereal) • TCPDump • Libpcap • SNORT • Winpcap, etc. • Wireshark can also read ERF formatted data. Note: ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 43: Synchronizing Clock Time

    Common synchronization sources include GPS or CDMA (cellular telephone) time receivers. Endace also provides the TDS 2 Time Distribution Server modules and TDS 6 expansion units that enable you to connect multiple DAG cards to a single GPS or CDMA unit.

  • Page 44: Network Time Protocol

    The best synchronization is achieved when the DAG card is synchronized to an external GPS reference clock, and the computer clock is synchronized to a local NTP server. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 45: Timestamps

    In this way the interpretation of the timestamp does not need to change when higher resolution clock hardware is available. The DAG 3.7D implements the 24 most significant bits which provides a time resolution of 59.6 nanoseconds.

  • Page 46: Dagclock

    The DAG card takes approximately 20 to 30 seconds to re- synchronize. By default, all DAG cards listen for synchronization signals on their RS-422 port, Note: and do not output any signal to that port. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 47: Dagclock Statistics Reset

    Thu Apr 28 13:32:45 2007 host Thu Apr 28 14:35:35 2007 Thu Apr 28 14:35:35 2007 Note: For a description of the output see Dagclock output explained (page dagclock ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 48: Dagclock Output Explained

    Highest absolute value of the since statistic collection began. Reset to zero when statistics are reset, see Dagclock Statistics reset. (page Example error Freq -30ppb Phase -60ns Worst Freq 75ppb Worst Phase 104ns ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...
  • Page 49 The DAG card time at the last time pulse. If the DAG card has never been synchronized, the following displays: No active input - free running. Example start Thu Apr 28 13:32:45 2007 host Thu Apr 28 14:35:35 2007 Thu Apr 28 14:35:35 2007 ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 50: Card With Reference

    This is derived directly from an external reference source or distributed through the Endace TDS 2 (Time Distribution Server) module which allows two DAG cards to use a single receiver. It is also possible for more than two DAG cards to use a single receiver by “daisy-chaining”...

  • Page 51: Single Card No Reference

    Total 87039 Bad 0 Singles Missed 0 Longest Sequence Missed 0 start Wed Apr 27 14:27:41 2007 host Thu Apr 28 14:38:20 2007 Thu Apr 28 14:38:20 2007 ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 52: Two Cards No Reference

    Thu Apr 28 14:48:34 2007 host Thu Apr 28 14:48:34 2007 No active input - Free running Note: The slave DAG card configuration is not shown as the default configuration will work. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 53: Synchronizing With Host

    Wed Apr 27 14:27:41 2007 host Thu Apr 28 14:59:14 2007 Thu Apr 28 14:59:14 2007 Note: The slave DAG card configuration is not shown, the default configuration is sufficient. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 54: Connector Pin-Outs

    RX PPS- TX PPS- TX SERIAL+ RX SERIAL+ TX SERIAL- RX SERIAL- Note: This wiring is the same as an Ethernet crossover cable (Gigabit crossover, All four pairs crossed). ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 55: Data Formats

    ERF records, there is no file header or trailer. This allows for simple concatenation and splitting of files to be performed on ERF record boundaries. For information on other ERF types, please refer to EDM11-01 ERF types. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 56: Generic Erf Header

    PCI bus. The loss is recorded between the current record and the previous record captured on the same stream/interface. The color field is explained under the appropriate type details. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...
  • Page 57 TYPE_IPV6 IPV6 Variable Length Record TYPE_RAW_LINK Raw link data, typically SONET or SDH Frame 32-47: Reserved for CoProcess Development Kit (CDK) Users and Internal use TYPE_PAD Pad Record type ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 58: Erf 1. Type_Pos_Hdlc

    Protocol Header. Length may vary depending on protocol, typically 4 bytes. (4 bytes) Payload Payload = rlen - ERF header (16 bytes) - Extension headers (optional) (bytes of record) - Protocol header (4 bytes) ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 59: Erf 3. Type_Atm

    (4 bytes) Flags ATM cells should not have the variable length flag set. (1 byte) Payload Payload = 48 bytes of cell + HEC (1 byte) (bytes of cell) ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 60: Extension Headers (Eh)

    The following diagram shows presence of an Extension Header in addition to the ERF record. The following diagram shows presence of two Extension Headers with Bit 7 of the first Extension Header set to '1'. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

  • Page 61: Troubleshooting

    EDM01-16v5 DAG_3.7D_Card_User_Guide Troubleshooting Reporting Problems If you have problems with a DAG 3.7D card or Endace supplied software which you are unable to resolve, please contact Endace Customer Support at support@endace.com Supplying as much information as possible enables Endace Customer Support to be more effective in their response to you.

  • Page 63: Version History

    The products described in this technical document are in development and have yet to complete final production quality assurance. Released The products described in this technical document have completed development and final production quality assurance. ©2005-2008 Endace Technology Ltd. Confidential - Version 5 - November 2008...

Table of Contents