GL Communications Inc.
 
 
Home >  VoIP Analysis and Simulation

Wirespeed Ethernet Packet Capture and Playback

PacketExpert™Software Ver 5.8.25 | Download Now!
PacketExpert™ 10G Software Ver 6.3.11 | Download Now!

Screenshot - PacketExpert™ - Wire speed Capture and Playback Module

Overview

Wirespeed Capture and Playback testing is an optional application within PacketExpert™ 10G platforms. Record Playback module is a Wirespeed Ethernet Tap, which works as a High-Precision Wirespeed Traffic Generator in optical interfaces supporting up to 10 Gb/s.  It supports all the features of high-end taps in a portable unit providing Wirespeed Packet Capture, Filter, Drop (for real-time analysis) & Storage (for offline analysis) over both 10G and 1G ports.

Wirespeed Capture and Playback is available in the following 2 PacketExpert™ platform variants -

  • PacketExpert™ (PXE100) – This is a quad port USB based portable unit, of which 2 ports are of 10/100/1000Mbps Electrical or Optical (Port 2, Port 3), and other 2 are 10/100/1000Mbps Electrical only. The application captures on the 10/100/1000Mbps Electrical / Optical ports (Pass-through ports) and stores the filtered data for offline analysis.  It supports all the features of high-end taps in a portable unit providing mobility and storage capacity to reach any point in the network.
  • PacketExpert™ 10G (PXG100) - This is a quad port USB based portable unit, of which 2 are 10 Gbps optical ports, and other 2 are 10/100/1000Mbps Electrical / Optical ports. The application captures on 10 Gbps ports or 1 Gbps ps ports (Pass-through ports) and stores the filtered data for offline analysis.  It supports all the features of high-end taps in a portable unit providing mobility and storage capacity to reach any point in the network. 

The Record and Playback modules allows users to use PacketExpert™ for -

  • Continuous Simultaneous Capture and Playback over Multiple Ports 
    • Continuous Long Term Capture along with real-time transfer to host PC. This allows for huge file capture limited being only the hard disk space
    • Filter for packets of interest, reducing the bandwidth needed to transfer to host
    • Record the captures to a file  - supports popular capture file formats such as *.pcap, *.ngpcap, *.hdl, and *.dat.
    • Continuous Playback on the same port where capture is running.
    • Supports simultaneous capture or playback functions on multiple ports –both on 10G or 1G ports.
    • Also supports simultaneous Packet Capture and Playback on the same port

  • High Precision Wirespeed Ethernet Packet Forwarding from a captured file
    • Precisely simulate/recreate live network traffic conditions.
    • Supports the 'As per File" option. This option allows user to precisely regenerate the traffic from a pre-recorded file i.e. traffic is transmitted at the precise rate at which it was captured (by maintaining the recorded timestamps).

  • High Precision Wirespeed Ethernet Packet Capture to a captured file
    • Supports limited lossless capture and continuous capture modes.
    • In lossless capture, the recording stops automatically when the Onboard buffer fills up.
    • In continuous capture, the recording continues even after the Onboard buffer is full with discontinuous recording indication.

For both Capture and Playback, the application supports popular capture file formats such as PCAP/PCAP-NG (Wireshark® formats) that gives the users the flexibility in analyzing and recreating any kind of live network conditions. The traffic captured on a live network using packet analyzers such as PacketScan™-All IP analyzer or Wireshark® can be easily recreated in the lab using PacketExpert™-Playback feature.

The packets captured to an HDL file using PacketExpert™- Record feature can be analyzed and decoded using PacketScan™-All IP analyzer application. 

PacketExpert™ also supports Command line Interface (CLI) to access all the functionalities  Record Playback remotely, using TCL client and the MAPS™ CLI client/server architecture.

Features

  PacketExpert™ 10G PacketExpert™ 1G

Record Only

  • Capture packets non-intrusively over 10G Optical ports and 10/100/1000 Mbps Electrical/Optical ports at nano-second precision.
  • Capture packets non-intrusively over 10/100/1000 Mbps Electrical/Optical ports at nano-second precision.
  • Wirespeed capture and storage can be accomplished utilizing the onboard DDR3 memory size of 8GB
  • Wirespeed capture and storage can be accomplished utilizing the onboard DDR2 memory size of 2GB
  • Up to 120 bytes wide filter that covers almost entire packet up to UDP
  • Up to 40 bytes wide filter that covers almost entire packet up to UDP
  • Supports raw-mode and packet-mode filtering for greater flexibility
  • Supports raw-mode filtering for greater flexibility
  • Hardware based Wirespeed filtering at full line rate
  • Tapping (Pass through mode), and Tap-Filter-Aggregate modes.
  • Recording can be done on multiple ports simultaneously.
  • Supported file formats for recording are *.pcap, *.hdl, *.dat, and *.pcapng/*.ntar
  • Packets can be captured continuously (till user manually stops the capture or up to hard drive capacity) or limited by a specified size in MB, packet count, time duration, or capture continuously (until the disk is full)
  • Result count includes the total number of packets received by the port as well as the host, dropped packet, number of bytes written to the file, disk write buffer utilization, and disk write bytes/sec
  • Provides Port level statistics like total frames/bytes received, Rx Frame rate, Rx Data rate etc.
  • Supports 16 filters per SFP / Ethernet port.
  • Filter on various header fields like Source/Destination MAC Address, VLAN Id, MPLS Label, Source/Destination Ipv4 Address, Source/Destination UDP ports

Playback Only

  • Wirespeed playback can be accomplished utilizing the onboard DDR3 memory size of 8GB
  • Wirespeed playback can be accomplished utilizing the onboard DDR2 memory size of 2GB

 

  • Packets transmission is from USB2.0 to Onboard memory buffer and playback is based on time-stamp depending on the captured rate
  • Playback packets from the captured or pre-recorded files
  • Playback can be done on both ports simultaneously
  • Each port can transmit a file separately and independently. ‘As per File’ option allows the users to playback the traffic exactly the same way as it was captured
  • Captured traffic on one port can be transmitted on the same or any other port – will be redirected to the correct port at run time
  • Packets can be transmitted either continuously, limited by number of packets, or till the end-of-file (EOF)
  • Highly accurate Playback based on the recorded nanosecond timestamp
  • Supported file formats are DAT (.dat - GL proprietary), HDL (.hdl - GL Proprietary and can be used for offline analysis by GL’s PacketScan™), PCAP (.pcap - used by Wireshark®) and PCAP-NG (.pcapng/.ntar – next generation Wireshark®) formats
  • Supports Pause frame transmission with user defined quanta on each port independently
  • Displays some useful statistics that help user to check the progress of the playback

Record and Playback

  • Supports both record to a file and playback from the file on the two 10G or 1G ports simultaneously.
  • It can work in Tap, Filter, and Aggregation mode.

Onboard 4 GB memory each is available for capturing and transmission of data respectively.

  • Supports both record to a file and playback from the file on three 1G simultaneously.
  • It can work in Tap, Filter, and Aggregation mode.
  • Onboard 1 GB memory each is available for capturing and transmission of data respectively.

Record and Playback (per port)

Not Supported

  • Both record and playback actions can be performed simultaneously on a single port.
  • Each of the ports function  independently
  • Onboard 1 GB memory each is available for capturing and transmission of data respectively

 

Hardware Interface - PacketExpert™ 10G



PacketExpert™ Hardware Unit




Front Panel




Back Panel


  Standalone Tablet Inspired

Interfaces:

  • 2 x 1G Base-X Optical OR 10/100/1000 Base-T Electrical
  • 2 x 10G Base-SR, -LR -ER Optical only
  • Single Mode or Multi Mode Fiber SFP support with LC connector

Protocols:

  • RFC 2544 compliance

Bus Interface:

  • USB 2.0
  • None or USB 2.0

External Power Supply:

  • +12 volts, 2.2 Amps
  • +18 Volts, 3.0 Amps

Physical Specification:

  • Length: 6.39 in. (162.33 mm)
  • Width: 9.96 in. (252.93 mm)
  • Height: 2.10 in (53.34 mm)
  • Weight: 3.75 lbs. (1.7 kg)
  • Length: 6.39 in. (162.22 mm)
  • Width: 9.96 in. (252.93 mm)
  • Height: 2.59 in (65.96 mm)
  • Weight: 4.75 lbs. (2.15 kg)

 

Hardware Interface - PacketExpert™ 1G



Back Panel



Front Panel

Interfaces

  • 2 x 10/100/1000 Base-T Electrical only
  • 2 x 1000 Base-X Optical OR 10/100/1000 Base-T Electrical
  • Single Mode or Multi Mode Fiber SFP support with LC connector

Protocols

  • RFC 2544 compliance

Bus Interface

  • USB 2.0

Power

  • +9 volts, 2.2 Amps

Temperature

  • Operating Temperature: +5 to +40C
  • Non-Operating Temperature: -30 to +60C

Humidity

  • Operating Humidity: 0% to 80% RH
  • Non-Operating Humidity: 0% to 95% RH

Altitude

  • Operating Altitude: Up to 10,000 feet
  • Non-Operating Altitude:  Up to 50,000 feet

Physical Specification

  • Length: 8.45 in. (214.63 mm)
  • Width: 5.55 in. (140.97 mm)
  • Height: 1.60 in (40.64 mm)
  • Weight: 1.66 lbs. (0.75 kg)

Working Principle - 10G

The tap, filter, and aggregation modes of PacketExpert™ 10G Record Playback application are detailed below:

  • Tap: Traffic is forwarded between the 10G/1G pass-through ports (Port 1 and Port 2) without any modification or delay.

  • Filter: wire-speed filtering of Layer2/Layer3/Layer4 packets, with each port featuring up to 16 simultaneous filters each of 120 bytes in length.   Filter can be set to any offset within the packet, which gives flexibility to filter any header field as well as the payload.

  • Aggregation: The filtered traffic from both 10G/1G: Port 1 and Port 2 can be aggregated to present them as a single stream. This aggregated stream is saved to the onboard 8 GB memory card (SD). Then the data is transferred to the PC at USB 2.0 transfer rate of around 250 Mbps rate, where it is stored in any of the following file formats (DAT, HDL, PCAP, NGPCAP), which can be later used for offline analysis.

The schematic below summarizes the different modes of PacketExpert™ Record Playback module.

The Record/Playback applications also supports following individual modes of operations:

Record Only Mode

  • Supports record to a file on 2 ports (port1, and port2) simultaneously. It supports the following features –
    • Tapping or Pass Through mode
    • Filter traffic-of-interest, and Aggregate mode
  • Onboard 8 GB memory is available for wire-speed capture



Record-to-File Only

Playback Only Mode

  • Supports aggregate playback-from-file on 2 ports (port1, and port2) simultaneously
  • Onboard 8 GB memory is available for transmission



Playback-from-file


Record and Playback Mode

  • Supports both record to a file and playback from the file on 2 ports (port1, and port2) simultaneously. It can work in Capture, Filter, and Aggregation mode.
  • Onboard 4 GB memory each is available for capturing and transmission of data respectively.


    Record and Playback

Working Principle - PacketExpert™ 1G

The tap, filter, and aggregation modes of PacketExpert™ Record Playback are detailed below:

  • Tap: Traffic is forwarded between the span ports (Port 2 and Port 3) without any modification or delay.

  • Filter: wire-speed filtering of L2/L3/L4 packets. The packets that are traffic compliant with any of the set filters is forwarded to the drop ports (Port 2 to Port 1, and Port 3 to Port 4) and can be analysed using a real-time packet analyser.

  • Aggregation: Alternatively, the filtered traffic from both Port 2 and Port 3 can be aggregated to present them as a single stream. This aggregated stream is saved to the onboard 2 GB memory card (SD) in any of the following file formats (DAT, HDL, PCAP, NGPCAP). Then the data is transferred to the PC at 350 Mbps rate, which can be later used for offline analysis.

The schematic below summarizes the different modes of PacketExpert™ Record Playback module.

Record and Playback feature has following modules –

  • Record Only mode - Can perform following operations –
    • Capture packets to files simultaneously on 2 GigE ports  (electrical or optical)
    • Up to 2 GB of traffic can be captured using the onboard 2 GB memory.


      Record-to-File
  • Playback Only mode – Can perform following operations –
    • Transmit packets at wirespeed using pre-recorded files simultaneously on up to 3 GigE ports (electrical or optical)
    • Upto 2 GB of traffic file can be loaded into the onboard 2 GB memory for wirespeed playback.


      Playback-from-file
  • Record and Playback mode - Can perform following operations – 
    • Continuous Capture, Filter, and Storage simultaneously on up to 3 GigE ports (electrical or optical)
    • Continuously Playback packets  using pre-recorded files simultaneously on up to 3 GigE ports (electrical or optical)
    • Simultaneously Capture and Record on 3 ports
    • Record and Playback utilises 1 GB each of the 2 GB on board memory available as a temporary buffer


      Record and Playback Mode
  • Record and Playback (per port) mode - Can perform following operations –
    • Wirespeed Packet Capture, and Filter along with Playback simultaneously on each of the 3 GigE ports (electrical or optical) independent of operations on other ports
    • Capture and Playback utilises 1 GB each, of the total 2 GB memory available onboard, as a temporary buffer.


      Record and Playback (per port) mode

 

Wirespeed Packet Filters and Triggers- PacketExpert™ 10G



Wirespeed Filter

The Record to File feature includes a powerful “Wirespeed filter” that allows user to filter out unwanted traffic, and continuously capture the traffic of interest. The limitation being only the hard disk size and the disk write speed. Features of the Wirespeed packet filter are listed below:

  • Filter packets and record only packets of interest
  • Capture simultaneously on 2 ports with 120 bytes deep filter per port (for record application) and set filter on any one of the ports or all ports
  • Packet filtering can be based on all Layer 2 (Ethernet), Layer 3 (IP) Layer 4 (UDP/TCP) Headers
  • Up to 16 filters can be defined per port. Each filter is up to 120 bytes wide
  • Filter can be set to each bit in the packet (Raw mode) or each field (Packet Mode)
  • Generates a trigger (1 Microsecond pulse) for each packet that passes the filter
  • Filter on various header fields like Source/Destination MAC Address, VLAN Id, MPLS Label, Source/Destination Ipv4 Address, Source/Destination UDP ports

Capture Traffic of Interest

Supports both Raw mode and Packet mode filter editing. In Raw mode, each bit can be set to ‘filtered’ or ‘don’t care’ condition via filter mask. For each filter, offset can be set to any byte within the packet (from 0 to 15999) which gives flexibility to filter particular fields within protocol headers, and also the payload.

Up to 16 filters can be defined, and “AND” /”OR” condition can be set to all the filters. Further, each filter can be set to either Accept or reject the packet.



Wirespeed Filter - Raw Mode

In Packet mode, user can define the Layer structure (Protocol Stack) of the packet, define the offset and edit individual field's data/mask. Users can create filters by configuring various header fields for MAC, VLAN, MPLS, IP, and UDP layers such as Source/Destination MAC Address, VLAN Id, MPLS Label, Source/Destination Ipv4 Address, and Source/Destination UDP ports.



Wirespeed Filter - Packet Mode

Wirespeed Packet Filters and Triggers- PacketExpert™ 1G



The Record to File feature includes a powerful “Wirespeed filter” that allows user to filter out unwanted traffic, and continuously capture the traffic of interest. The limitation being only the hard disk size and the disk write speed. Features of the Wirespeed packet filter are listed below:

  • Filter packets and record only packets of interest
  • Capture simultaneously on  2 ports with 40 bytes deep filter per port (for record Only module) or on 3 ports with 16 bytes deep filter (for Record and Playback module) and set filter on  any one of the ports or all ports
  • Packet filtering can be based on all Layer 2 (Ethernet), Layer 3 (IP) Layer 4 (UDP/TCP) Headers
  • Up to 16 filters can be defined per port. Each filter is up to 40/16 bytes wide
  • Filter can be set to each bit in the packet (Raw mode) or each field (Packet Mode)
Generates a trigger (1 Microsecond pulse) for each packet that passes the filter


Capture Traffic of Interest

Supports both Raw mode/Packet mode filter editing. In Raw mode, each bit can be set to ‘filtered’ or ‘don’t care’ condition via filter mask. For each filter, offset can be set to any byte within the packet (from 0 to 2000) which gives flexibility to filter particular fields within protocol headers, and also the payload. Up to 16 filters can be defined, and “AND” /”OR” condition can be set to all the filters. Further, each filter can be set to either Accept or reject the packet.



Wirespeed Filter - Raw Mode

In Packet mode, user can define the Layer structure (Protocol Stack) of the packet, define the offset and edit individual field's data/mask.



Wirespeed Filter - Packet Mode

Results and Statistics - PacketExpert™ 10G

Record statistics display includes Capture Duration, Total Rx Frames, Frames not matched to filter, Frames matched to filter, Overflowed Frames, Overflowed Count, Transferred Frames, Disk Write Rate (bytes/sec), Disk Write Buffer Utilization (%), and Capture File Size.

Playback from file statistics includes Playback time, Total number of transferred frames to onboard buffer, and Total frames transmitted parameters.


Record-to-File Statistics



Playback-from-file Statistics


Aggregate Filter Statistics displays both recording and playback statistics for both the ports.


Aggregate Filter Statistics

Complete Test Report can be exported in PDF or CSV formats. The report details can also be customized with user-defined Title, Header, Footer, and Logo prior to generating.



Complete Test
Report


Playback Only 10G
Report


Playback Record 10G
Report
     


Record Only 10G
Report
   

Results and Statistics - PacketExpert™ 1G

Record statistics display includes Capture Duration, Total Rx Frames, Frames not matched to filter, Frames matched to filter, Overflowed Frames, Overflowed Count, Transferred Frames, Disk Write Rate (bytes/sec), Disk Write Buffer Utilization (%), and Capture File Size

Playback from file statistics includes Playback time, Total number of transferred frames to onboard buffer, and Total frames transmitted parameters


Record-to-File Statistics



Playback-from-file Statistics


Aggregate Filter Statistics gives the number of frames passing a particular filter configuration.


Aggregate Filter Statistics

Complete Test Report can be exported in PDF or CSV formats. The report details can also be customized with user-defined Title, Header, Footer, and Logo prior to generating.



Complete Test
Report


Playback Only 10G
Report


Playback Record 10G
Report
     


Record Only 10G
Report
   

Buyer's Guide

Please Note: The XX in the Item No. refers to the hardware platform, listed at the bottom of the Buyer's Guide, which the software will be running on. Therefore, XX can either be ETA or EEA (Octal/Quad Boards), PTA or PEA (tProbe Units), UTA or UEA (USB Units), HUT or HUE (Universal Cards), and HDT or HDE (HD cards) depending upon the hardware.

Item No. Item Description

PXE105
PXG105

Wire speed Record /Playback - 1G
Wire speed Record /Playback - 10G

PXG100

PacketExpert 10G™

PXG101

PacketExpert 10G™ with Tablet

PXE100
PXE104
PXE112
PXE124

PacketExpert™
PacketExpert™ - SA (4 ports) 
PacketExpert™ - SA (12 Ports)
PacketExpert™ - SA (24 Ports)

IPN110

IPLinkSim™ WAN Link Emulator
(1 Gbps, 2 active ports)

IPN510

IPLinkSim™ WAN Link Emulator
(1G/ 10G, 2 active ports)

PXE107
PXG107

PacketBroker™ - 1G
PacketBroker™ - 10G

PXE108
PXG108

Multi-Stream Traffic Generator and Analyzer - 1G (on PXE100) (up to 12 users)
Multi-Stream Traffic Generator and Analyzer - 10G (on PXG100, PXG101) (up to 16 users)

PXE106
PXG106

ExpertSAM™ - 1G
ExpertSAM™ - 10G

 

Related Software

ETH100

PacketCheck™

PKS100

PacketGen™ (includes PacketScan™)

PKV100

PacketScan™ (Online and Offline)

PKB100

RTP ToolBox™

PKV201

PKV202

PacketShark™ GbE Filtering & Aggregation Tap
PacketShark™ Remote Option

IPN501 IPNetSim™ - 1G
IPN505 IPNetSim™ - 1G Tablet
IPN503 IPNetSim™ - 10G

IPN701


IPN702

IPNetSim™ Handheld 
Network Impairment Generator
IPNetSim™ Handheld 
Remote Option

PKS120
PKS121
PKS122
PKS123
PKS124
PKS130

MAPS™ SIP Emulator 
MAPS™ SIP Conformance Test Suite (Test Scripts)
MAPS™ MEGACO Emulator
MAPS™ MEGACO Conformance Test Suite (Test Scripts)
MAPS – MGCP Protocol Emulation with Conformance Test Suite
MAPS™ SIGTRAN Emulator

Related Accessories and Cables (PacketExpert™, IPNetSim™)

IPN1310

SFP Transceiver for 1 Gbps  Optical, Duplex LC, Single-Mode, 1310nm, 15km typical maximum range

IPN850

SFP Transceiver for 1 Gbps  Optical, Duplex LC, Multi-Mode, 850nm, 550m typical maximum range

IPN1310p

SFP+ Transceiver for 10 Gbps  Optical, Duplex LC, Single-Mode, 1310nm, 10km typical maximum range

IPN850p

SFP+ Transceiver for 10 Gbps  Optical, Duplex LC, Multi-Mode, 850nm, 300m typical maximum range

SA019a
SA019b
SA019c
SA019d

1 Gbps / 10 Gbps  Fiber Optic Cable, Single-Mode, Duplex LC to Duplex LC 
1 Gbps / 10 Gbps  Fiber Optic Cable, Single-Mode, Duplex LC to Duplex SC 
1 Gbps / 10 Gbps  Fiber Optic Cable, Multi-Mode, Duplex LC to Duplex LC 
1 Gbps / 10 Gbps  Fiber Optic Cable, Multi-Mode, Duplex LC to Duplex SC

SA019st

1 Gbps / 10 Gbps  Fiber Optic Non-Intrusive T-tap, Duplex LC, Single-Mode

SA019sc

Fiber Optic Analyzer Cable, (Special ’Y’ Cable), Single-Mode, Duplex LC to Dual Duplex LC, 3m

SA019mt

1 Gbps / 10 Gbps  Fiber Optic Non-Intrusive T-tap, Duplex LC, Multi-Mode

SA019mc

Fiber Optic Analyzer Cable (Special ’Y’ Cable), Multi-Mode, Duplex LC to Dual Duplex LC, 3m

SA019rt

Electrical Regeneration Tap for 10/100/1000Base-T

SA019sk2

1 Gbps  Fiber Optic Single-Mode T-tap Kit with Required Cables and SFP Transceivers

SA019mk2

1 Gbps  Fiber Optic Multi-Mode T-tap Kit with Required Cables and SFP Transceivers

SA019skp2

10 Gbps  Fiber Optic Single-Mode T-tap Kit with Required Cables and SFP+ Transceivers

SA019mkp2

10 Gbps  Fiber Optic Multi-Mode T-tap Kit with Required Cables and SFP+ Transceivers

* Specifications are subject to change without notice

 
 
Home Page Sitemap Global Presence Email