NETMON Input Format Parameters
The NETMON input format supports the following parameters:
| fMode | ||
| Values: | TCPIP | TCPConn | |
| Default: | TCPIP | |
| Description: | Operation mode. | |
| Details: | When this parameter is set to "TCPIP", the NETMON
input format returns an input record for each TCP/IP packet found in the capture file.
In this case, input records contain fields from the TCP and IP packet headers, together
with the payload of each packet. When this parameter is set to "TCPConn", the NETMON input format returns an input record for each TCP connection found in the capture file. In this case, input records contain fields calculated by aggregating all the TCP packets in the connection, including the reconstructed payload sent by both endpoints. For more information on the different modes of operation, see NETMON Input Format Fields. |
|
| Example: | -fMode:TCPConn | |
| binaryFormat | ||
| Values: | ASC | PRINT | HEX | |
| Default: | ASC | |
| Description: | Format of binary fields. | |
| Details: | TCP packet payloads are returned as STRING values
formatted according to the value specified for this parameter. When this parameter is set to "ASC", data bytes belonging to the 0x20-0x7F range are returned as ASCII characters, while data bytes outside the range are returned as period (.) characters, as shown in the following example: POST /test_system/request HTTP/1.1..Content-Length: 3411..Connection: Keep-Alive..When this parameter is set to "PRINT", data bytes representing printable ASCII characters are returned as ASCII characters, while data bytes that do not represent printable ASCII characters are returned as period (.) characters, as shown in the following example: POST /test_system/request HTTP/1.1 Content-Length: 3411 Connection: Keep-AliveWhen this parameter is set to "HEX", all data bytes are returned as two-digit hexadecimal values, as shown in the following example: 504F5354202F63636D5F73797374656D2F7265717565737420485454502F312E310D0A |
|
| Example: | -binaryFormat:PRINT | |