ProfiShark 1G
Contents
1. PROFITAP ProfiShark 1G User manual Gigabit Ethernet Troubleshooter Thank you for purchasing the ProfiShark 1G Package contents 1 ProfiShark 1G main unit 1 USB key containing drivers software and manual 1 USB 3 0 cable 1 RJ45 cable 1 Carrying pouch Table of contents General Information ccoo Network TAP 2 ProfiShark 1G Visual Description Driver Install ON cuca a Analyzer installation ProfiShark 1G Manager Installation Description Statistics Counters Graphs Meters Log Features Packet Capture NIC Capture mode Direct Capture mode Direct Capture setup Timestamping Additional Information The ProfiShark 1G is a handheld Plug and Play device dedicated to inline gigabit monitoring It facilitates in field traffic capture and troubleshooting The ProfiShark 1G is equivalent to a 10 100 1G aggregator TAP and two 1 Gbit s NICs All in one in a pocket sized box the only additional hardware required being a laptop with a free USB 3 0 port As it is based on USB 3 0 5 Gbit s the ProfiShark 1G manages full duplex gigabit at wire speed without the bottleneck of an aggregator TAP It also surpasses all standard NICs in capture mode as the ProfiShark 1G catches any tag and encapsulation without altering fr2. software without modifying them see Feature chapter lt is transparent for packet size packet type or protocols All tags and encapsulation are preserved e g Vlan MPLS GRE PT3 Manager 8 1 T P Counters Graphs Meters Log Festures Capture 2 PT3 Device Connected Link Up 1Gbt Full Duplex Driver Version 0 1 0 0 Software Dropped Packets 0 SW Firmware Version 0 1 0 1 Hardware Dropped Packets 5717487 HW Firmware Version 0003 Link Up Duration 0 00 20 MAC Address 0004333729 Last Link Down Duration 6 09 Firmware Update Browse Rash Femware Capture Format No Timestamp V Transmit CRC Errors Unix timestamp at end of packet J Keep CRC32 Nanosecond timestamp at end of packet Disable Port A Save Unix timestamp at beginning of packet Disable Port B Nanosecond timestamp at beginning of packet Packet Slicing The Software Dropped Packets counter in the Feature tab indicates the number of packets dropped by the driver in NIC capture mode It s not repre sentative of the dropped packets in Direct Capture see Direct Capture Mode chapter These drop events are caused by too high CPU usage The Hardware Dropped Packets counter indicates the amount of captured packets dropped due to low USB bandwidth e g Gigabit capture on USB 2 0 In USB 3 0 mode this counter is not supposed to increase even in full speed gigabit capture Note small packet capture at gigabit full speed is extremely chal
3. 18 bytes size gt 1518 bytes the CRC valid frames with a size over 1518 bytes Collisions the CRC error frames with a size under 64 bytes CRC Errors the CRC error frames with a size over or equal to 64 bytes and under or equal to 1518 bytes Jabbers the CRC errors frames with a size over 1518 bytes Valid frames the CRC valid frames of any size Invalid frames the CRC error frames of any size Total bytes the valid frame bytes Graphs PT3 Manager o 8 2 Counters Graphs Meters Log Features Capture Graphs Controls Pot A Clear History CRC Errors 10s division r 30000 Invalid Packets A Bandwidth Usage Port A Size lt 64 64 lt Size lt 1518 Size gt 1518 20000 Collisions 10000 Y CRC Eroe Jabbers 04 Y Vaid Packets Y Invalid Packets Y Bandwidth Usage Port B Por B Size lt 64 64 lt Size lt 1518 A hortor 25000 f Sue gt 1518 Colisions 20000 CRC Errors 15000 Jabbers y Y Vaid Packets 10000 Y Invalid Packets lal 5000 Y Bandwidth Usage packet s o The Graphs tab allows you to inspect statistical data over time using plots For each port you can plot any of the statistical data by using the checkboxes on the left Once a box is checked the corresponding data appears on the graph on the right Refresh rate can be selected usin
4. C Address 00 043317 29 2b Last Link Down Duration 2 7288 Firmware Update Browse Flash Firmware Capture Format No Timestamp V Transmt CRC Emors Unix timestamp at end of packet J Keep CRC32 Nanosecond timestamp at end of packet Disable Port A Save Unix timestamp at beginning of packet Disable Port B Nanosecond timestamp at beginning of packet Packet Sicing The Features tab regroups information about the driver and firmware version port status the firmware update utility and a way to enable or disable ProfiShark 1G features To update the ProfiShark 1G firmware press the browse button select the firmware file and press the Flash Firmware button The corresponding firmware update will begin You cannot use the ProfiShark 1G Manager while the update is in progress The update process can take a few minutes to complete Once it is done please unplug and replug the ProfiShark device to use the new firmware Please do not unplug the USB port or shut your computer down during the update process You can download the latest firmware from the User Section at www profitap com On the same screen you can enable or disable the following features Transmit CRC Errors if checked the ProfiShark will not filter out network packets with CRC errors like a normal NIC would Keep CRC32 removes the CRC32 information 32 bit Frame Check Se quence located at the end of the packets Disable Port A if checked the frames which input on po
5. ames The ProfiShark 1G is the perfect tool for the field engineer as well as for long term traffic collection Features 10 100 1G monitoring on USB 3 0 USB 3 0 powered Failure safe monitoring Hardware aggregation 8 ns hardware timestamp Real time statistics Low level error and bandwidth monitoring CRC error capture Capture any packet with any analyzer Direct capture to disk Network TAP The ProfiShark 1G integrated network TAP provides safe access to the network for monitoring purposes It is a passive monitoring device meaning it is undetectable the original traffic staying unaltered and no extra packets being inserted As most of the TAP s functions are performed by dedicated hardware circuits it is much more reliable and error proof than SPAN ports In a gigabit network the TAP has to negotiate with both attached devices for the highest common speed If no common speed can be found or if one of the devices is disconnected the TAP propagates the error to the other at tached device allowing a redundant path to be activated In case of power failure it activates its bypass circuits connecting the two attached devices directly The ProfiShark 1G integrates a high performance fast failover circuit and a proprietary algorithm reducing the unavailability of the network path down to 30ms Note the fast failover relies on the network setup In case the fast failover cannot perform the two end d
6. evices have to renegotiate the link This opera tion takes about 2 seconds End Device 1 End Device 2 1 Cable Types DTE Straight Through and Crossover DCE Straight Through and Crossover Through Through Note The user should verify that the two end devices connect together with either a single cable an RJ45 coupler or the unpowered TAP The straight or crossover cables must be employed in case of end devices that do not sup port Auto MDI MDIX operate i e Auto Crossover Experienced users can bypass this procedure Note Although some vendors recommend the use of the non IEEE compliant Forced Gigabit mode we strongly recommend activating auto negotiation when Gigabit speed is required More generally auto negotiation should always be enabled on both end devices in order to avoid duplex mismatch issues ProfiShark 1G Visual Description 1 Port A RJ45 connected to the network 2 Port B RJ45 connected to the network 3 see below 4 see below 5 see below 6 Power indicator LED 7 USB 3 0 connector linked to your monitoring device i e a laptop computer 8 DC input 5V 1A The ProfiShark s state is displayed on the front LEDs 3 4 5 LEDs functio nalities are named on top of the ProfiShark TAP functions Steady LED 10 4 TAP is operating at 10 Mbit s Steady LED 100 5 TAP is operating at 100 Mbit s Steady LED 10 4 and LED 100 5 TAP is operating at 1000 Mbit s Steady Link acti
7. fiShark 1G Manager can be used at the same time as a software network analyzer without the need to interrupt data capture Statistics ProfiShark 1G Manager provides several different visual representations for network statistics The following pages give an overview of these representa tions Counters PT3 Manager Counters Graphs Meters Log Features Capture Counters Controls Pot A Pot B Gear Al Total Rate s Percentage Total Rate s Percentage Gear A size lt 64 bytes 0 0 Oear B 64 lt size lt 1518 2272331 0 size gt 1518 bytes 6375 0 Collisions 0 0 Vaid Packets 2278 706 0 invalid Packets 7 163 1242 Total Bytes 182 749 334 0 2 I e gt 8lolo 8 o o o o 8 In the Counters tab are listed every counter embedded in the ProfiShark 1G for both network ports The counters are 64 bits hardware counters they are cleared at hardware startup and at link disconnection Statistics can be reset individually for each port or for the two ports at the same time using the buttons on the left Clearing the counters using the buttons does not clear the hardware counters but stores all counters in reference counter Then the displayed counters are result of the formula hardware counter reference counter Counters description size lt 64 bytes the CRC valid frames with a size under 64 bytes 64 lt size lt 1518 the CRC valid frames with a size over or equal to 64 bytes and under or equal to 15
8. g the drop down list on the left allowing you to plot up to 10 hours of statistics When packet s is selected each series displays the corresponding number of packets per second except for the bandwidth usage which is displayed in bytes per second When percentage is selected each series is displayed in term of percentage of the total number of packets except for the bandwidth usage which is displayed in percentage of the total bandwidth Both graphs history can be reset using the Clear History button on the left Disconnecting the ProfiShark 1G also reset the graphs data Meters The meters tab uses meters to display the current bandwidth usage the average bandwidth usage and the average CRC error rate for each port The meters history can be reset using the Clear History button on the left Log The Log tab offers to set thresholds for bandwidth usage and CRC error rate Every time the threshold is exceeded a log entry is added allowing to easily identify the type date and the port of the event This can be used for long term analysis where events happen randomly over a long period of time Y Bard Usage Features Y PT3 Manager Le P Counters Graphs Meters Log Features Capture ause PT3 Device Connected Link Up 1Gbt Full Duplex Driver Version 0 1 0 0 Software Dropped Packets 0 SW Firmware Version 0 1 0 1 Hardware Dropped Packets 0 HW Firmware Version 0003 Link Up Duration 0 00 25 MA
9. in capture can be done with one or multiple files Number of files to use specify the amount of capture files to be created Start Capture when capture isn t running starts the capture with the specified parameters Stop Capture when capture is running stops the capture and releases the capture file Written to File indicates the amount of data written in the Output Capture File Current Cache Usage indicates the RAM cache s current usage Dropped indicates the amount of data dropped during the Direct Capture Note the amount of dropped data depends on the data storage throughput and the amount of RAM cache Disk arrays or SSDs can drastically improve capture performance Timestamping Hardware timstamping feature can also be used in NIC mode capture using the Profitap s Wireshark dissector The files are located on the USB flash drive It can also be downloaded in the User Section at www profitap com The Wireshark dissector is only compatible with nanosecond at end of packet Please refer to the Features chapter to enable the timestamp Linux Copy the two files profishark_1g la and profishark_1g so in usr local lib wireshark plugins wireshark_version from x86 or x64 depending on the Liunx version Windows Copy the file profishark_1g dll in C Program Files lib Wireshark plugins wireshark_version from x86 or x64 depending on the Windows version The dissector can be enabled or disabled i
10. lenging for processors and can cause software drops For that reason another capture mode is available see Direct Capture Mode chapter Direct Capture mode ProfiShark 1G provides with the option to capture traffic without the need of a third party capture software This mode of capture is accomplished on driver level prior to all network stacks and frame processing With the support of direct capture small packet capture can be performed at full wire speed PTS Manager Coutos Gragha Meters Log Ferres ne Disput Cac Fin Mamm Capture Fie Soe ME Number of thes to use The generated capture file format can be chosen between the following PCAP Next Generation pcapng Libpcap nanosecond pcap ERF erf In all capture format the packet s timestamp are hardware generated with an 8 nanosecond accuracy The direct capture is compatible with the different hardware features Packet Slicing Transmit CRC errors Keep CRC32 Disable Port Please refer to the Features chapter Direct Capture setup Output Capture File specify the name and location of the capture file Name extension will be added to the specified name HHHHYYYYMMDDHHMMSS Maximum Capture File Size MB the capture will stop when the file reaches the specified size in MB Loop if selected the capture does not stop The files are erased to keep the specified amount of capture files A round rob
11. n Wireshark Edit gt Preferences gt Protocols gt Profishark 1G gt Enable Profishark 1G decoding M Wireshark Preferences Profile Default Enable Profishar 1G decoding PPP MP PPPoED PRES 3 PRP PULSE PVFS Q 931 Additional information Ordering reference Dimensions Height Width Length Supported OS System requirements Accessories Connectors LEDs ie Consumption es with full traffic 100Mbps with full traffic 10Mbps with full traffic Operating Tempera ture Storage Temper ature Relative humidity Maximum Network Latency Link 1Gpbs Link Y 100Mbps Link 10Mbps Compliance C1AP 1G 0 94 inches 2 72 inches 4 88 inches Windows 7 32 amp 64 bits Windows 8 32 amp 64 bits Linux Dual Core Processor 1GB memory USB 3 0 port 1 8m USB 3 0 cable Pouch USB key 2 x RJ45 8 pins 1 x USB 3 0 1 x 5VDC input 2 x Link activity 2 x Speed 1 x Power 0 to 50 C 40 to 80 C 10 to 95 no condensing 32 to 122 F 40 to 176 F FCC classA To achieve maximum performance and to avoid potential packet loss or malfunctions Disclaimer The information in this document is subject to change without notice The manufacturer makes no representations or warranties with respect to the contents hereof and specifically disclaims any implied warranties of merchan tability or fitness for any particular purpose The manufacturer reserve
12. r COMCRAFT 17A rue des Fr res Lumi re 67201 Eckbolsheim France Website www profitap com E mail info profitap com 1
13. re listed in the User Section at www profitap com Wireshark is recommended and provided on the USB flash drive To install it please follow the instructions provided by the installation wizard To capture network data start your preferred network analyzer and select the new network interface named ProfiShark 1G Device Please refer to your analyzer s manual or user help to know more about how to select a network interface ProfiShark 1G Manager Installation To install the ProfiShark 1G Manager execute the setup utility located on the USB flash drive in the ProfiShark 1G Manager folder Please make sure that you have uninstalled any older version of the ProfiShark 1G Manager before starting the setup utility The setup utility will create a launch icon in your startup menu that you can use to start the ProfiShark 1G Manager Please check for the latest software release for your operating system in the User Section at www profitap com You will need to register to access this area Registering is free and will let you participate in ongoing product impro vements Description ProfiShark 1G Manager is a standalone application designed by ProfiTAP It provides a way for statistical analysis of a network allowing for efficient excessive bandwidth usage detection or any low layer errors using charts prior to a deeper investigation using an analyzer It is also used as a firmware flashing utility to update your product Pro
14. rt A are not cap tured Disable Port B if checked the frames which input on port B are not cap tured Packet Slicing If checked the first 128 frames Bytes are captured No Timestamp if selected the frames are captured without extra timestamp Unix timestamp at end of packet if selected a Unix formatted timestamp is adjoined at the end of the packet data Nanosecond timestamp at end of packet if selected a nanosecond for matted timestamp is adjoined at the end of the packet data Unix timestamp at beginning of packet if selected an Unix formatted times tamp is adjoined at the beginning of the packet data Nanosecond timestamp at beginning of packet if selected a nanosecond formatted timestamp is adjoined at the beginning of the packet data Unix timestamp format the 64 bits timestamp is organized in two 32 bits words representing the seconds since 01 01 1970 and the fraction of se cond Nanosecond timestamp format the 64bits timestamp represent the nanose conds since 01 01 1970 Note if the Packet Slicing feature is enabled the hardware automatically disable the Keep CRC32 feature No padding is added to frames smaller than 128 Bytes Note if both options Transmit CRC Errors and Keep CRC32 are enabled all the erroneous packets will be treated as fair ones Packet capture ProfiShark 1G gives you the ability to capture Any type of frames pause frames Vlan
15. s the right to revise this publication and to make changes in the content hereof without obligation of the manufacturer to notify any person of such revision or changes Warranty and Liability Comcraft warrants that this product is free from defects in material and work manship at time of shipment The warranty period is two years from the date of purchase Comcraft assumes no liability for products that have been subjected to abuse modification misuse or if the model or serial number has been altered tampered with defaced or removed Comcraft is not liable under any contract negligence strict liability or other legal or equitable theory for any loss of use of the product inconvenience or damages of any charac ter whether direct special incidental or consequential including but not limited to damages for loss of goodwill loss of revenue or profit work stop page or malfunction Copyright This publication including all photographs and illustrations is protected under international copyright laws with all rights reserved Neither this manual nor any of the material contained herein may be reproduced without written consent of the author Trademarks The trademarks mentioned in this manual are the sole property of their owners Page 22 Notes www profitap com Page 23 v1 8 2014 Comcraft CUSTOMER SUPPORT INFORMATION For technical information support Phone 33 388 101830 Fax 33 388 101835 Mail orde
16. tagged Any encapsulated frames CRC errors frames Short frames lt 64 bytes Jumbo frames gt 1518 bytes Any frames between 10 bytes and 10 Kbytes Once the drivers have been properly installed a new connection is added in the Network Connection panel ProfiShark 1G acts as two 1 Gbit s unidirectio nal NICs regardless of the network connection speed The frames aggrega tion is done in hardware respecting the original frame order As opposed to FIFO First In First Out the ProfiShark 1G employs an FCFS First Come First Served mechanism A reboot of the computer may be required to refresh the Winpcap Wireshark device list ProfiShark 1G has been tested with all major capture analyzer software Page 14 Two mode of capture are available Nic Capture mode and Direct Capture mode In NIC Capture mode the capture is performed like on any other Network Card The frames are routed to the NDIS driver In Direct Capture mode the frame stream is dumped to the hard disk The capture file format is computed in the ProfiShark 1G hardware Direct capture vs NIC capture PT3 Hardware ans Timestamp Direct Capture format computation PT3 NIC Capture PT3 Direct Capture Driver Driver Network Driver NDIS Hard Disk Capture Driver e g Winpcap Protocol analyzer e g Wireshark NIC Capture mode ProfiShark 1G transmits network frames to the capture
17. vity 3 the port is linked up Blinking Link activity 3 the port is linked up and has RX TX activity Blinking LED 10 4 and LED 100 5 TAP not connected or trying to connect Alternating LED 10 4 and LED 100 5 TAP cannot find a common speed between Networks A and B General functions Blinking LED 10 4 The ProfiShark is initializing Blinking LED 100 5 The ProfiShark HW firmware is corrupted Driver Installation Drivers are available for Windows 7 32 64 bits and Windows 8 32 64 bits To install the ProfiShark 1G drivers execute the setup utility located on the USB flash drive in the ProfiShark 1G Manager folder Please make sure that you have uninstalled any older version of ProfiShark 1G Manager before starting the setup utility Connect the ProfiShark 1G on a free USB 3 0 port and the drivers should install automatically For a manual installation the drivers can be found in the default installation folder C Program Files x86 Profitap ProfiShark 1G Driver PT3 A reboot of the computer may be required in order to refresh the Winpcap Wireshark device list Please check for the latest driver release for your operating system in the User Section at www profitap com You will need to register to access this area Registering is free and will let you participate in ongoing product impro vements Analyzer installation To perform the analysis you can use any of the supported analyzers Sup ported analyzers a
Download Pdf Manuals
Related Search