Chapter 4 Capturing and Decoding Packet Data

Sessions

Table 4-3

Capture Settings Fields (continued)

 

 

 

 

 

Field

 

Description

Usage Notes

 

 

 

 

Storage Type:

 

Check to store captures in

Enter values for Memory Size for this capture. Enter a number from

Memory

 

memory

1 up to your platform maximum. If system memory is low, the actual

 

 

 

session size allocated might be less than the number specified here.

 

 

 

See Table 4-4for maximum session sizes for each NAM platform.

 

 

 

The NAM Traffic Analyzer will grant less memory than requested if

 

 

 

the available memory is less than requested.

 

 

 

Check (if desired) Wrap when Full to enable continuous capture

 

 

 

(when the session is full, older packet data is removed to make room

 

 

 

for new incoming packets). If you do not check Wrap when Full, the

 

 

 

capture will end when the amount of data reaches size of session.

 

 

 

Storage Type: File(s)

File Size (MB)

Enter a value for File Size (file size can be from 1 to 2 GB or up to 10

 

 

 

GB for the NAM appliances). About 400MB of free disk space is

 

 

 

reserved for working files. If available disk space is below 400 MB,

 

 

 

you will not be able to start new capture-to-disk sessions. See

 

 

 

Table 4-4,Maximum Capture Session Sizes for NAM Platforms.

 

 

 

 

 

 

Number of Files

Enter a value for Number Of Files to use for continuous capture.

 

 

 

 

 

 

Rotate Files

Check the Rotate Files check box to rotate files in continuous capture.

 

 

 

Available only for remote storage or NAM 2200 Series appliances.

 

 

 

See section Capture Data Storage, page 2-18, for information about

 

 

 

configuring remote storage.

 

 

 

The Rotate Files option can only be used with remote storage or the

 

 

 

NAM 2200 Series appliance’s local disk. See the section Capture

 

 

 

Data Storage, page 2-18, for information about configuring remote

 

 

 

storage.

 

 

 

If you choose the Rotate Files option, when you reach the highest

 

 

 

number file, the earliest file is overwritten. For example, if you

 

 

 

specify No. Files to 10, file CaptureA_1 is overwritten after the

 

 

 

NAM writes capture data to file CaptureA_10. To determine the most

 

 

 

recent capture, check each file’s time stamp.

 

 

 

 

 

 

File Location

Choose a location from File Location. Local disk is the default, or

 

 

 

choose a previously configured remote storage location. You can add

 

 

 

(NFS and iSCSI) remote storage locations by going to

 

 

 

Administration > System > Capture Data Storage.

 

 

 

 

Table 4-4lists the hardware platforms NAM 5.0supports and their maximum session size. This is the maximum capture memory buffer size for all capture sessions together, not individually.

Table 4-4 Maximum Capture Session Sizes for NAM Platforms

 

 

 

 

 

Maximum Session

 

 

 

 

 

NAM Platform

Size

 

 

 

 

 

 

 

 

 

 

 

WS-SVC-NAM-1

125 MB

 

 

 

 

 

 

 

 

 

 

 

WS-SVC-NAM-1 with memory upgrade (MEM-C6KNAM-2GB)

500 MB

 

 

 

 

 

 

 

 

 

 

 

WS-SVC-NAM-1-250S

200 MB

 

 

 

 

 

 

 

 

 

 

 

User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

4-6

 

 

 

OL-22617-01

 

 

 

 

 

 

Page 166
Image 166
Cisco Systems 5 manual Maximum Capture Session Sizes for NAM Platforms, Administration System Capture Data Storage