Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Add_workflow_for_techpubs
AUTH1UserResourceIdentifier{userKey=8a00a0c86820e56901685f374974002d, userName='null'}
JIRAIDAUTHSBX-72649
REV5UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cb8305e9, userName='null'}
REV6UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cb8305e9, userName='null'}
REV3UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26ca7d045b, userName='null'}
REV1UserResourceIdentifier{userKey=8a00a02355cd1c2f0155cd26cd3d0995, userName='null'}



Panel

In this section:

Table of Contents
maxLevel3


Use the TShark tool to analyze the network issues by capturing the packet traces. These captured packets are saved as .pcap files and Wireshark reads these packet traces.

To protect the system from overload, TShark captures one packet trace at a time.

Info
titleNote

The TShark 1.8 is the latest supported version.


Info
titleNote

Ensure that Wireshark application is installed and configure appropriately before proceeding.

 


On the main SBC screen, go to Troubleshooting > Troubleshooting Tools > TShark. The Run TShark Trace window is displayed. 


Caption
0Figure
1Run TShark Trace

Image RemovedImage Added

The following fields are displayed.

Caption
0Table
1TShark Trace Parameters


ParameterDescription
Platform Interfaces

Drop-down list of different platform interfaces available for capturing the packet traces. 

NicenessOption to run TSHARK with different Niceness levels. Allows you to perform troubleshooting during peak hours. The Niceness option displays as a drop-down with the range -20 to 19. If you change the Niceness value from the default value (19), a warning message displays indicating that running the TSHARK with a different Niceness value can impact the system's performance.
Filter  Optional field to enter a TShark filter. For example, to capture the ppkt2 interface traffic (media signaling) to and fro IP address 172.18.5.4, enter host 172.18.5.4.

Save log file as 

Option to enter the name of the packet trace to be saved.

Status

Specifies the status of the packet trace.

 

To


Start a Trace

  1. For Platform Interface, choose the desired value from the Platform Interface drop-down list.

    Caption
    0Figure
    1\Platform InterfacePlatform Interface

    Image Added


  2. Select the Niceness value from the drop-down. 

    Caption
    0Figure
    1Niceness Drop-down Option

    Image Added


    Info
    titleNote

    When the default Niceness value is changed and the trace is started, a warning message shown in the figure below displays.


    Caption
    0Figure
    1Niceness Value Change Warning

    Image AddedImage Removed


  3. (Optional) For Filter, enter a valid Tshark filter syntax.

    Caption
    0Figure
    1TShark Filter

    Image RemovedImage Added


  4. For Save log file as, enter the log file name.

    Caption
    0Figure
    1Save log file as

    Image RemovedImage Added


  5. Click Start Trace.

    Caption
    0Figure
    1Start Trace

    Image RemovedImage Added


    Status is updated to Trace Running.

    Caption
    0Figure
    1Trace Running Status

    Image RemovedImage Added


  6. Proceed to next section to stop and save the trace file.
To

Stop and Save Trace

  1. Click Stop and Save Trace. The status is updated to Trace saved to a file <filename>.pcap where <filename> is the name of the saved log file. 

    Caption
    0Figure
    1Stop and Save Trace

    Image RemovedImage Added


  2. To view the TShark log files, go to Troubleshooting > Call Trace/Logs/Monitors > Log Management. Select T-Shark from the list to view the logs. Refer to Log Management for more information.

    Info
    titleNote

    T-Shark option is not available under the list until at least one trace is started, stopped and saved.


Info
titleNote

Files with the .pcap extension contains the Tshark trace. The Tshark program stops writing to the files after the file size exceeds 500 megabytes. The

Spacevars
0product
halts the writing operation to stop creating excessively large file buffers. This limits the memory consumption by the Tshark program, and prevents system failure.

 


Pagebreak