User manual CACE TECHNOLOGIES PILOT CONSOLE REFERENCE MANUAL 10-2010

[. . . ] Reference Manual THE SHARK DISTRIBUTED MONITORING SYSTEM PUBLISHED BY CACE Technologies, Inc. 1949 5th Street, Suite 103 Davis, CA 95616 Copyright © 2010 CACE Technologies, Inc. No part of the contents of this manuscript may be reproduced or transmitted in any form or by any means without the written permission of the publisher. Wireshark and the Wireshark icon are registered trademarks of Wireshark Foundation, Inc. [. . . ] Page 55 Pilot Console Reference Manual CanImportFiles: if set to true, the user can import files into the Shark Appliance, through drag and drop or by clicking on the "Import Files Into Shark Appliance" button in the Remote ribbon. CanExportFiles: if set to true, allows the user to export files from the Shark Appliance, and move them to the Pilot Console or to another Shark Appliance (assuming the user has sufficient privilege on the target Shark Appliance to create a trace file). When this privilege is not granted, the user is not able to export a trace file to Wireshark, because that involves exporting packets out of the Shark Appliance to the Pilot Console. CanShareViews: if set to true, the user can share the views that he created on the Shark Appliance with other users or groups connected to the Shark Appliance from other Consoles. CanAccessProbeFiles: if set to true, the user will be able to "see" the trace files located on the Shark Appliance. HasFolder: if set, Shark Appliance creates a shared folder for the group with the name of the group (only applies to groups). Otherwise, the folder will not be visible to the members of the group. Privilege Policy Since both users and groups can be granted or revoked roles, and since a user can be part of one or more groups, conflicts can arise between the user roles and the groups roles. The Shark Appliance solves conflicts through the following rules: Granting or revoking a role to the user has precedence over granting or revoking it to the groups the user is part of. In other words, if a role is present (both as true or false) under the user tag in the users file, the fact that the same role is present for any of the groups the user is part of is ignored. If a role is not set for a user, it is inherited from the groups it is part of. If different groups have conflicting roles, the highest privilege is assigned to the user. The Ribbon Figure 81 Remote Ribbon In this section we discuss the sections of the Remote Ribbon: Probe Management, Probe Selection, Files, and View Selection. Pilot Console Reference Manual Page 56 Probe Management Add Probe Clicking on the Add Probe button brings up the Connect to Probe panel. Icon 34 Add Probe Figure 82 Connect to Probe Panel The Connect to Probe panel is used to initiate a connection to a Shark Appliance. The Shark Appliance Address can be either a domain name or IP address and the port number of the Shark Appliance. User name and password are also provided along with any descriptive comment regarding the Shark Appliance. When OK is clicked the Pilot Console initiates a request to connect to the Shark Appliance. The information regarding the Shark Appliance is saved in the probe list which is accessible using the Probes icon located in the Probe Management section of the Remote ribbon. Probes The Probes button brings up the probes panel containing, among other things, the list of probes that have been Added, but not Deleted, using the Connect to Probe panel. Icon 35 Probes Pilot Console Reference Manual Page 57 Figure 83 Probes Panel The first item in Probes Panel is the Create Probe Group. This selection is used to create a collection of probes that can be treated as a single group. If a probe is member of a probe group, then it will only appear within the probes group in the Probes Panel. Below the Create Probe Group is a list of all of the probes to which we have tried to connect using the Add Probe panel and have not been removed from this list. Clicking on the icon to the left of one of the probes on the list will disconnect the Pilot Console from the probe if it is already connected. On the other hand, if the probe is initially disconnected, then clicking on the icon will reconnect the probe as the user shown in the Probes Panel. Selecting a Shark Appliance on the list brings up a submenu containing operations permitted on the selected Shark Appliance. Edit the Description, move the Shark Appliance into a probe group, connect or disconnect the Pilot Console from the Shark Appliance, display the Shark Appliance settings, and delete the Shark Appliance from the list. [. . . ] Inverse Selection The Inverse Selection check box toggles whether the results that match the search term should be selected, or their respective inverse. Use Regular Expressions "Regular Expressions" are a technical term which allow for a very flexible match. The Pilot Console supports POSIX regular expressions, which are well documented elsewhere. Here are the basic regular expression syntax: ^ Match the beginning of a label. [. . . ]