When present on equipment this manual pertains to, the statement "This device complies with part 15 of the FCC
rules" specifies the equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the Federal Communications Commission [FCC] Rules.
These limits are designed to provide reasonable protection against harmful interference when the equipment is
operated in a commercial environment.
This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in
accordance with the instruction manual, may cause harmful interference to radio communications.
Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will
be required to correct the interference at their own expense.
Extra Components and Materials
The product that this manual pertains to may include extra components and materials that are not essential to its
basic operation, but are necessary to ensure compliance to the product standards required by the United States
Federal Communications Commission, and the European EMC Directive. Modification or removal of these
components and/or materials, is liable to cause non compliance to these standards, and in doing so invalidate the
user’s right to operate this equipment in a Class A industrial environment.
Disclaimer
Whilst every effort has been made to ensure accuracy, neither Endace Technology Limited nor any employee of
the company, shall be liable on any ground whatsoever to any party in respect of decisions or actions they may
make as a result of using this information.
Endace Technology Limited has taken great effort to verify the accuracy of this manual, but nothing herein should
be construed as a warranty and Endace shall not be liable for technical or editorial errors or omissions contained
herein.
In accordance with the Endace Technology Limited policy of continuing development, the information contained
herein is subject to change without notice.
Website
http://www.endace.com
Copyright 2005-2008 Endace Technology Ltd. All rights reserved.
No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any
means electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of the
Endace Technology Limited.
Endace, the Endace logo, Endace Accelerated, DAG, NinjaBox and NinjaProbe are trademarks or registered
trademarks in New Zealand, or other countries, of Endace Technology Limited. Applied Watch and the Applied
Watch logo are registered trademarks of Applied Watch Technologies LLC in the USA. All other product or
service names are the property of their respective owners. Product and company names used are for identification
purposes only and such use does not imply any agreement between Endace and any named company, or any
sponsorship or endorsement by any named company.
Use of the Endace products described in this document is subject to the Endace Terms of Trade and the Endace
End User License Agreement (EULA).
Card Features .............................................................................................................................................................. 1
Purpose of this User Guide ....................................................................................................................................... 2
System Requirements................................................................................................................................................. 2
General ................................................................................................................................................................... 2
Operating System ................................................................................................................................................. 2
Other Systems........................................................................................................................................................ 2
Line Types ................................................................................................................................................................... 5
DAG Software package ............................................................................................................................................. 7
Inserting the DAG Card ............................................................................................................................................ 7
Port Connectors .......................................................................................................................................................... 8
External pod housing ................................................................................................................................................. 8
External Pod .......................................................................................................................................................... 9
Pod rackmount chassis ....................................................................................................................................... 10
Before configuring the DAG card ..................................................................................................................... 19
Setting up the FPGA ................................................................................................................................................ 20
Programming the FPGA .................................................................................................................................... 20
Loading new firmware images onto a DAG Card ......................................................................................... 22
Preparing the DAG card for use ............................................................................................................................. 22
Configuring the DAG card ...................................................................................................................................... 23
Display Current Configuration ......................................................................................................................... 23
Configuring the Links ........................................................................................................................................ 24
Viewing the DAG card status ................................................................................................................................. 34
Interface Status .................................................................................................................................................... 34
Connection ID ........................................................................................................................................................... 38
RAW Connections .............................................................................................................................................. 38
Output Record Formats ........................................................................................................................................... 39
Line Connection .................................................................................................................................................. 40
RAW Connection ................................................................................................................................................ 40
Line RAW Connection ....................................................................................................................................... 40
Channel RAW Connection ................................................................................................................................ 40
Hyper-Channel RAW Connection ................................................................................................................... 40
Sub-Channel RAW Connection ........................................................................................................................ 41
Output Record Formats .......................................................................................................................................... 44
Line Connection .................................................................................................................................................. 45
ATM Scrambling on Interface ........................................................................................................................... 46
HEC Connection on Interface ........................................................................................................................... 46
Using Mixed Firmware ........................................................................................................................................... 47
Basic data capture .................................................................................................................................................... 49
Starting a capture session .................................................................................................................................. 49
Capturing data at high speed ........................................................................................................................... 51
Viewing captured data ............................................................................................................................................ 52
Converting captured data ....................................................................................................................................... 54
Using third party applications ............................................................................................................................... 56
Transmitting captured data .................................................................................................................................... 56
Loading the Images ............................................................................................................................................ 59
Starting the XScale .............................................................................................................................................. 59
Directing Data to the XScale ............................................................................................................................. 60
Using the AAL Reassembler .................................................................................................................................. 60
Using IMA ................................................................................................................................................................. 61
IMA Monitor ....................................................................................................................................................... 61
IMA Transmit...................................................................................................................................................... 62
Using the HDLC Filter ............................................................................................................................................ 63
Using HDLC and IMA Together ............................................................................................................................ 63
Common Synchronization ...................................................................................................................................... 65
Network Time Protocol ........................................................................................................................................... 66
Example ................................................................................................................................................................ 67
Card with Reference ................................................................................................................................................. 72
Pulse Signal from External Source .................................................................................................................... 72
Connecting the Time Distribution Server ........................................................................................................ 72
Testing the Signal ................................................................................................................................................ 72
Single Card No Reference ....................................................................................................................................... 73
Two Cards No Reference ......................................................................................................................................... 74
Synchronizing with Each Other ........................................................................................................................ 74
Synchronizing with Host ................................................................................................................................... 75
The Endace DAG 3.7T Card is optimized for monitoring and interception with precise
timestamping capability on up to 16 T1/E1 network links. The DAG card actively manages
the movement of network data into memory while only consuming a minimal amount of the
host computers resources.
The DAG 3.7T is a 16 port, PCI card that allows capture and transmission of data.
Supported protocols include raw data (unmapped/unframed), HDLC and ATM over as
many as 512 sub-channels, channels and hyper-channels. The DAG 3.7T also supports
Inverse Multiplex ATM (IMA) link aggregation, AAL2 and AAL5 segmentation and
reassembly, and frame (HDLC), cell (ATM) and packet (AAL2/5) filtering based on userdefined filter rules. An onboard Intel® XScale™ processor provides the means to pre-process
data prior to presentation to the monitoring software (or prior to transmission over a T1/E1
link).
Card Features
The following features are available on this DAG card. Note: Different firmware images
may be required. Not all features are available on each firmware image. For further
information on which feature is available in what firmware image, see
The DAG 3.7T cards are PCI bus cards designed for cell and packet capture and generation
over IP networks. The key features of the card are:
• Support for 16 RJ-45 T1/E1 network interfaces in an external pod housing.
• A Spartan III FPGA supporting high-performance Endace firmware,
• An Intel 80321 XScale IO processor which supports AAL2/AAL5 reassembly or
inverse multiplexing over ATM (IMA) and filtering services,
•Support for receiving and sending channelized, unchannelized, and fractional T1/E1,
HDLC and non-HDLC data traffic,
•Support for data traffic filtering.
Battery removal – don’t do it!
Removing the battery from a DAG card voids your warranty.
Removing the battery from a DAG card will cause the loss of encryption key used to decode
the DAG card's firmware. Once the encryption key is lost the DAG card must be returned to
Endace for reprogramming.
The battery in this product is expected to last a minimum of 10 years.
Caution
Risk of explosion if the battery is replaced by an incorrect type.
Dispose of used batteries carefully.
It is important that you understand the physical characteristics of the network to which you
want to connect. If your configuration settings do not match your network, the DAG 3.7T
card will not function as expected.
Overview
Endace DAG 3.7T card provides the means to transfer data at the full speed of the network
into the memory of the host computer, with zero packet loss guaranteed in even worst-case
conditions. Further, unlike a Network Interface Card (NIC), Endace products actively
manage the movement of network data into memory while only consuming a minimal
amount of the host computer's resources. The full attention of the CPU remains focused on
the analysis of incoming data without a constant stream of interruptions as new packets
arrive from the network. For a busy network link, this feature has a turbo-charging effect
similar to that of adding a second CPU to the system.
The DAG 3.7T is a Network Monitoring Interface Card specifically designed to perform high
efficiency monitoring and transmission with precision timestamping capability on up to
sixteen T1/E1 network links.
The flexibility provided by the Exar chips means that the card will accept a wide range of
settings. However if they are not the correct settings for your network the card will not
function as expected.
Note: If you are unsure about which of the options listed below to apply to your network,
please contact your Network Administrator for further information.
Supported Options
The line characteristics supported by the DAG 3.7T card are described below.
Line Type:
• E1: European digital standard 2 Mbps,
• E1 CRC: E1 with cyclic redundancy check,
• T1: North American digital standard 1.544 Mbps,
• T1 SF: Super frame, (also called D4 framing). An SF is 12 frames long,
• T1 ESF: Extended super frame, (also called D5 framing), includes CRC and bandwidth
Encoding Type:
Cable Termination Types:
Signal Attenuation:
for a data link channel. An ESF is 24 frames long.
•B8ZS: Bipolar with Eight Zero Substitution (T1 only)/HDB3 Hi-density Bipolar Three
A DAG 3.7T card can be installed in any free PCI slot. It is 5V tolerant and operates only in
32-bit 33MHz PCI mode.
If you install the card into a slot that is rated for higher speeds it will cause the bus to
automatically change to 33MHz. This will also affect any other devices which may be sharing
the bus.
You can run multiple DAG 3.7T cards on one bus. By default, the DAG driver supports up to
DAG Software package
Inserting the DAG Card
four DAG cards in one system.
The latest DAG Software package must be installed before you install the DAG 3.7T card
itself. See EDM04-01 DAG Software Installation Guide, which is included on the CD shipped
with the DAG 3.7T card.
Caution:
It is very important to protect both the computer and the DAG 3.7T card from
damage by electro-static discharge (ESD). Failure to do so could cause damage to
components and subsequently cause the card to partially or completely fail.
1. Turn power to the computer OFF.
2. Remove the PCI bus slot screw and cover.
3. Using an approved ESD protection device attach the end with the strap to your wrist
and pull or clip firmly so there is firm contact with your wrist.
4. Securely attach the clip on the other end of the strap to a solid metal area on the
computer chassis as shown below.
5. Insert the DAG 3.7T card into PCI bus slot ensuring it is firmly seated.
6. If this DAG card requires an external power supply, complete the following steps:
a. Connect the supplied (or equivalent) power cable to the external power connector
on the DAG card.
b. Connect the cable to the appropriate power connector on your server's power
supply unit.
7. Check the free end of the card fits securely into the card-end bracket that supports the
weight of the card.
8. Secure the card with the bus slot cover screw.
9. Turn power to the computer ON.
10. Ensure the blue (FPGA successfully programmed) LED on the DAG card illuminates.
Before you begin to configure the DAG card it is important to understand the function of the
various LEDs associated with the card, as well as the sockets on the PCI bracket.
There is an 8-pin RJ-45 PPS input socket located below the SFP connectors on the PCI bracket.
This is available for connection to an external time synchronization source only.
Caution:
Never connect an Ethernet network or telephone line to the RJ-45 PPS input socket.
External pod housing
There are two forms of external Pod housing that are available:
•an external Pod case - housed in a 5.25 inch drive bay housing. For further details see
External Pod9 (page ).
•a Pod rackmount chassis - a 1U, 19 in rack housing. For further details see
Note:You can connect only one Pod to the DAG 3.7T card at any one time.
You can mount the DAG 3.7T Pod either:
•internally in a spare 5.25 inch drive bay in the computer chassis, or
Use the supplied VHDCI ribbon cable.
•sit it separately outside of the computer chassis.
Use a shielded VHDCI ribbon cable rather than the supplied ribbon cable.
The Pod and the DAG 3.7T card connect via a VHDCI cable which is supplied with the Pod.
The DAG 3.7T card has one VHDCI connector located on the PCI bracket and another on the
card itself. The Pod has one VHDCI connector located on the rear of the casing.
Connecting the external Pod to the computer
If the Pod is mounted internally in the computer chassis you need to use the VHDCI
connector located on the card itself as shown in the picture below.
If the Pod is mounted external to the computer chassis you need to use the connector located
on the card PCI bracket as shown in the picture below.
The RJ45 cables for connecting the network interfaces to the Pod are not supplied with the
DAG 3.7T card or the Pod. You must source these yourself.
If you have an Endace Pod, you are able to use standard E1/T1 cables available from your
local electronic stockist. If you do not have an Endace Pod you will need to make the cables
up yourself to match the Pod pinouts shown in the following tables.
Note: You can identify the standard Endace Pod by the web address “www.endace.com”
written on the front of the casing.
The physical pinouts of the RJ-45 connectors for both Endace and other pods are shown
below:
Once you have connected the interfaces to the Pod you must connect the interfaces to the
network via a tap as shown in the diagram below:
You must use a separate tap for each interface.
When you have connected the Pod to the DAG 3.7T and the network interfaces to the
network, you must configure the card for your specific requirements. This process is
described next in
Configuring the DAG Card19 (page ).
Note:For further information about using taps to connect to the network, please consult
All DAG cards have at least one Field-Programmable Gate Array (FPGA). The FPGA
contains the firmware for the DAG card. The firmware defines how the DAG card operates
when capturing data and contains the specific configuration.
Note: Some DAG cards have multiple FPGA's.
For each FPGA there are two firmware images:
• a factory image - contains fixed basic functionality for operating the DAG card.
• a user image - contains an upgradable version of the DAG card firmware. Additional
functionality for the DAG card is available via the user image. Different user images
may be available with different functionality, i.e. TERF, DSM etc.
Firmware images are loaded into DAG card flash ROM in the factory. The image is
programmed into the FPGA each time the DAG card is powered up. The user image can
then be programmed into the FPGA either manually or via a script.
Programming the FPGA
Before configuring the DAG card for capture, you must load and program the DAG card
with the appropriate FPGA image.
Note:For information about the
dagrom options, see dagrom21 (page ).
• For High Data Lin Control (HDLC) capture, use:
dagrom –rvp –d0 –f xilinx/dag37tpci-hdlc-erf.bit
• For Asynchronous Transfer Mode (ATM) capture, use:
dagrom –rvp –d0 –f xilinx/dag37tpci-atm-erf.bit
• For ATM and HDLC capture, use:
dagrom –rvp –d0 –f xilinx/dag37tpci-mixed-erf.bit
where "0" is the device number of the DAG card you wish to capture data from
New DAG card FPGA images are released regularly by Endace as part of software packages.
They can be downloaded from the Endace website at
https://www.endace.com/support
.
Endace recommends you use the
computer to the ROM on the DAG card.
The -r option invokes a comparison of images on the computer and in the DAG card. Newer
versions are automatically loaded onto the DAG card and programmed into the FPGA. See
dagrom21 (page ). This eliminates unnecessary reprogramming of the ROM and extends its
life.
Preparing the DAG card for use
Before configuring the DAG 3.7T card you must run the following dagconfig command to
set the default parameters in the DAG card. This ensures the DAG 3.7T card functions
correctly once you begin capturing data.
Note:Ensure you run this command each time the FPGA is reprogrammed.
The current DAG 3.7T configuration displays and the firmware is verified as correctly
loaded. See
Once you have loaded the FPGA image you should run the dagconfig tool without
arguments to display the current card configuration and verify the firmware has been loaded
correctly.
To display the current DAG card configuration, type the following:
dagconfig –d0
(where "0" is the device number of the DAG card you wish to capture data from).
A description of available tokens follows.
Note:Not all tokens displayed in the following diagram.
Display Current Configuration
dagthree has been depreciated from DAG Software release 3.2 onwards. It has been
replaced with
customer use
dagconfig. Both are still valid. Endace recommends that new
dagconfig.
An example of a dagconfig output of a erf / atm image loaded is shown below:
Note: The default configuration displays for all 16 links even if there is no interface
physically connected to the Pod.
Returning the card to the default configuration means that all the links will have the same
settings. You then only need to re-configure those you want to change from the default.
Each connected link on the DAG 3.7T Pod must be configured to the requirements of the
tapped network. For each link complete the following steps to configure the link.
Note:Each link represents a network interface on the 3.7T Pod.
1. Identify network characteristics
2. Choose appropriate mode
3. Configure the link + examples
1. Identify network characteristics
To find out what kind of mode connection to use for your network you must know the
physical characteristics of your network. The DAG 3.7T card supports the following options:
Line Types:
• E1: European digital standard 2 Mbps,
• E1 CRC: E1 with cyclic redundancy check,
• T1: North American digital standard 1.544 Mbps,
• T1 SF: Super frame, (also called D4 framing). An SF is 12 frames long,
• T1 ESF: Extended super frame, (also called D5 framing), includes CRC and bandwidth
for a data link channel. An ESF is 24 frames long.
Encoding Types:
•B8ZS: Bipolar with Eight Zero Substitution (T1 only)/HDB3 Hi-density Bipolar Three
The table below describes the different modes corresponding to line characteristics
supported by the DAG 3.7T card. Select the required mode for each link.
Note:Ensure that the mode you select matches the physical characteristics of the network
to which you want to connect.
Mode Type Tx LBO
0 T1 Long Haul/36dB 0dB 100Ω/ TPB8ZS
1 T1 Long Haul/36dB -7.5dB 100Ω/ TPB8ZS
2 T1 Long Haul/36dB -15dB 100Ω/ TPB8ZS
3 T1 Long Haul/36dB -22.5dB 100Ω/ TPB8ZS
4 T1 Long Haul/45dB 0dB 100Ω/ TPB8ZS
5 T1 Long Haul/45dB -7.5dB 100Ω/ TPB8ZS
6 T1 Long Haul/45dB -15dB 100Ω/ TPB8ZS
7 T1 Long Haul/45dB -22.5dB 100Ω/ TPB8ZS
8 T1 Short Haul/15dB 0-133 ft./ 0.6dB 100Ω/ TP B8ZS
9 T1 Short Haul/15dB 133-266 ft./ 1.2dB 100Ω/ TPB8ZS
10 T1 Short Haul/15dB 266-399 ft./ 1.8dB 100Ω/ TPB8ZS
11 T1 Short Haul/15dB 399-533 ft./ 2.4dB 100Ω/ TPB8ZS
12 T1 Short Haul/15dB 533-655 ft./ 3.0dB 100Ω/ TPB8ZS
13 T1 Short Haul/15dB Arbitrary Pulse 100Ω/ TP B8ZS
14 T1 Gain Mode/29dB 0-133 ft./ 0.6dB 100Ω/ TP B8ZS
15 T1 Gain Mode/29dB 133-266 ft./ 1.2dB 100Ω/ TP B8ZS
16 T1 Gain Mode/29dB 266-399 ft./ 1.8dB 100Ω/ TP B8ZS
17 T1 Gain Mode/29dB 399-533 ft./ 2.4dB 100Ω/ TP B8ZS
18 T1 Gain Mode/29dB 533-655 ft./ 3.0dB 100Ω/ TP B8ZS
19 T1 Gain Mode/29dB Arbitrary Pulse 100Ω/ TP B8ZS
20 T1 Gain Mode/29dB 0dB 100Ω/ TP B8ZS
21 T1 Gain Mode/29dB -7.5dB 100Ω/ TP B8ZS
22 T1 Gain Mode/29dB -15dB 100Ω/ TP B8ZS
23 T1 Gain Mode/29dB -22.5dB 100Ω/ TP B8ZS
24 E1 Long Haul/36dB ITU G.703/Arbitrary 75Ω/ coaxHDB3
25 E1 Long Haul/36dB ITU G.703/Arbitrary 120Ω/ TPHDB3
26 E1 Long Haul/43dB ITU G.703/Arbitrary 75Ω/ coaxHDB3
27 E1 Long Haul/43dB ITU G.703/Arbitrary 120Ω/ TPHDB3
28 E1 Short Haul/15dB ITU G.703/Arbitrary 75Ω/ coaxHDB3
29 E1 Short Haull/15dB ITU G.703/Arbitrary 120Ω/ TP HDB3
Using the default command, resets any altered DAG card settings to the factory default
settings. You can not return individual links to default setting.
The DAG 3.7T card now uses dagconfig instead of dagthree. The tokens listed below can be
used with
align64
Sets whether the generated packets are 64-bit aligned (align64) or 32-bit aligned (noalign64)
before being received by the host.
Example
dagconfig align64
dagconfig noalign64
buffer_size
The buffer size=nMB indicates that a total of n MB of memory have been allocated to the
DAG card in total. Memory allocation occurs when the
See EDM04-01 DAG Software Installation Guide for details on how to allocate memory.
crc
Indicates that this DAG card is set to perform a Cyclic Redundancy Check (CRC) on the
receive stream.
dagconfig.
dagmem driver is loaded at boot time.
Not configurable.
default
The default command initializes the DAG card configuration and sets all settings to default
values. The command also resets the DAG card configuration back to its default state.
Note: When you run
dagconfig -d0 default the dagclock inputs and outputs are also reset
to defaults.
Example
dagconfig -d0 default
drop
Details the number of packets dropped during current capture session. Resets to 0 when the
session restarted. Indication only can not be changed.
Example
The following shows that 15 packets have been dropped in the current session:
drop=15
e1 / e1_crc / e1_unframed
Sets the E1 line characteristics for the ports in the range A to H or I to P.
eql/noeql
Sets or unsets equipment loopback. For testing set to eql mode and normal operation set to
noeql mode.
Note:
eql mode loops transmit data from the host back to the PCI bus.
Turns on or off the error reporting for this DAG card.
Example
dagconfig error
dagconfig noerror
fcl/nofcl
Note:Sets or unsets Facility loop back. For testing set to fcl mode and normal operation
set to
nofcl mode.
FCL retransmits the data received and also send it to the host.
Example
dagconfig fcl
dagconfig nofcl
HDLC
Tells the card to process HDLC packets.
Example
dagconfig hdlc
mem
You can split the DAG card's allocated memory between the receive and transmit stream
buffers to suit your own requirements. The split is displayed as a ratio as shown below:
mem=X:Y
where:
X is the memory allocated in MB to the rx stream
Y is the memory allocated in MB to the tx stream.
If there are multiple
mem=X:Y:X:Y:X:Y
rx or tx streams memory can be allocated to each stream:
Buffer_size27 (page ) and rx and tx Streams29 (page ) are related to mem.
Example
You can split 128MB of memory evenly between the tx and rx streams using:
dagconfig –d0 mem=64:64
Note: You can not change the stream memory allocations while packet capture or
transmission is in progress.
overlap/nooverlap
Configures the rx and tx memory hole to be overlapped. This enables in-line forwarding
without copying the data across the memory holes.
Example
dagconfig overlap
dagconfig nooverlap
Note:This option is only applicable on firmware images containing TX.
Before you begin to capture data you can set the size that you want the captured packets to
be. You can do this using the
dagconfig tool to define the packet snaplength (slen).
Note: The snaplength value must be a multiple of 8 and in the range 48 to 2040 per card
inclusive.
By default,
slen which is the portion of the packet that you want to capture is set to 48 per
card. This means that only the first 48 bytes of each packet will be captured.
If for example you want to capture only the IP header of each packet you may want to set the
length to a different value. Alternatively if you want to ensure you capture the whole packet
you can set the length to a larger value.
Example
Setting up a DAG 3.7T card with a snap length of 200 bytes:
dagconfig -d0 slen=200
Note: The ERF header is not included in the slen value. Therefore a slen of 48 will
produce a 64-byte capture record made up of 48 bytes plus the number of bytes in
the ERF header.
However because the Ethernet record headers occupy 18 bytes instead of the
standard 16 bytes, any payload captured will always be 2 bytes less than the
value i.e. a
slen of 48 will produce a 64-byte record made up of 18 bytes of header
slen
and 46 bytes of payload.
For more information on Ethernet records, see
Data Formats77 (page ) later in this
user guide.
t1_esf / t1_sf / t1_unframed
Sets the T1 line characteristics for the ports in the range A to H or I to P.
terf_strip16/terf_strip32/noterf_strip
Strips the CRC value (16 or 32 bits) from the packet or sends packet “as is” (noterf_strip).
The TERF line in the current configuration indicates the current Terf option.
Note:Only displayed if the DAG card supports transmit (i.e. has a terf image).
dagconfig is a software utility used to configure and display statistics.
By default all commands, unless otherwise defined, run on device 0 (
-d0). Commands only
apply to one DAG card.
The following is a list options available in
dagconfig. Not all options listed are applicable to
all cards.
Options: Description
Port A only (default all). Multi-port cards only.
-2,--portb
-C,--counters
-d,--device <device>
-e,--extended
-G,--getattribute <getattribute>
-i,--interval <seconds>
-v,--verbose <level>
Port B only (default all). Multi-port cards only.
Port C only (default all). Four-port cards only.
Port D only (default all). Four-port cards only.
As above, for extra ports on the 3.7T DAG card.
Connection configuration. Used by the DAG 7.1S only.
Outputs the counters. Verbosity levels from 0=(basic / default) to
3=(full).
DAG device to use. Default is d0.
Displays the current extended statistics (non boolean and image
dependant). Verbosity levels from 0=(basic / default) to 3=(full).
Note: Some images may not contain extended statistics.
Gets individual attributes by attribute name. Use in conjunction with
the --porta or --portb options to get individual only multi-port cards.
Displays the MAN pages. The information displayed is dynamically
based on the DAG card and does not work correctly when there is no
DAG card in the system.
Note: There are a few commands that display even though they are not
applicable.
Interval to repeat in seconds.
Outputs the hardware monitor information.
Outputs the DAG card voltage monitor information.
Sets individual attributes by attribute name. Use in conjunction with
the --porta or --portb options to get individual only multi-port cards.
Outputs the statistics for the DAG card. Verbosity levels from 0=(basic
/ default) to 3=(full).
Outputs the supported Configuration and Status attributes and
components with the description and name. Using the -v2 verbosity
level also outputs all components and attribute codes. Verbosity levels
from 0=(basic / default) to 3=(full).
Outputs the transmit statistics for the DAG card. Where applicable.
Outputs the universal counters for the DAG card. Where applicable.
Sets the verbosity level, from 0 (basic) to 3 (full).
Display the DAG card version information.
Note:For cards with more than 2 ports you can select the required port using: -
A definition of each of the status bits is described below:
Condition Definition
Interface or port number (0-15)
dmo
tx0
tx1
lcd
up
LIU Loss of Signal: There is not enough voltage swing on the input line.
LIU Alarm Indication Signal: The input is receiving only the value “1”
LIU Line Code Violation: Data coding is in valid and does not comply with the
AMI/HDB3 or B8ZS standard.
LIU FIFO Limit Status: The data recovery FIFO has overflowed.
LIU Drive Monitor Output: Limits the transmit output voltage.
LIU Cable Loss (dB +/- 1dB): The loss seen on the cable relative to 0dB.
The framer has received the value “0”. This is useful to ensure the line toggles correctly.
The framer has received the value “1”. This is useful to ensure the line toggles correctly.
The framer has transmitted the value “0”. This is useful to ensure the line toggles
correctly.
The framer has transmitted the value “0”. This is useful to ensure the line toggles
correctly.
Framer CRC error: The framer has detected a CRC error. Only valid for E1 CRC.
Framer Alarm Indication Signal: The framer (internally) is only receiving the value “1” as
payload.
Framer Error: A framing error has been detected.
Loss of Cell Delineation: The ATM demapper experienced a problem locking to the ATM
cell stream.
Framer Up: The Framer is locked to the frame sequence.
Interpretation
The statistics display which dagconfig outputs provides you with detailed information about
the status of each of the individual links that you have configured on the card. If any of the
conditions on any of the links are not as you expect you may need to review your
configuration options and change them accordingly
As a general rule you should use the lowest possible gain control value (eg. short haul) to
avoid over amplifying the signal which increases the chance of signal errors.
For Example:
For a twisted pair E1 line you could use
attenuated less < 15dB). However if
increase the amplification by using
Mode 29 (minimum gain control, signal
dagconfig reports a poor signal you could
Mode 27 (extended long haul/43 dB).
Caution:
When using high gain modes ensure the unconnected physical interfaces are not
configured to capture HDLC data. If configured, the interfaces will receive noise
from the adjacent interfaces, amplify it and generate packets with bit errors.
You can define the HDLC physical channels for the card by using the dagchan tool to read a
channel configuration file and then create each of the channels defined in that file.
one of the standard tools shipped with your Endace software.
dagchan is
Note:To use
firmware or the mixed firmware loaded on the card.
You can create a channel configuration file using any common text editor such as Notepad,
VI Editor, Emacs etc.
By default
dagchan deletes all existing channel definitions on the card, and then creates the
new channel definitions. Use this option if you are configuring a new card or if you want to
remove all existing definitions. If the card you are configuring has existing channel
definitions that you want to retain, just add new definitions by using the “
command line.
Configuration File
You can use the configuration file to do the following:
• Designate channels to either receive or transmit.
Note:The type of connections shown in the configuration file reflect the data that is
present on the network to which you are connected. Please ensure you understand
the type of connection you wish to monitor before beginning to configure the
interfaces.
dagchan to configure HDLC channels you must have either the HDLC
-r” option in the
Each line in the configuration file represents a different command. Each command begins
with a letter which designates the connection type, followed by a sequence of one or more
numbers as shown in the examples later in this chapter. The following letters are valid:
Command Description
timeslot connection,
delete connection,
hyper-channel connection,
line connection,
RAW line connection,
sub-channel connection,
RAW line connection,
RAW hyper-channel connection,
RAW sub-channel connection,
RAW channel connection.
Multiple Interfaces
If you wish to configure connections on multiple interfaces you need to repeat the
configuration procedure for each interface you want to monitor.
By default all new connections will receive. To designate specific connections to either
receive or transmit you must type “
configuration line for that connection.
transmit” on the line of the file immediately before the
All subsequent connections in the file will also transmit unless you type “
which all subsequent connections will receive. This is shown in the sample
Connection39 (page ) chan.config file later in this chapter.
Note: If you do not type either “
connections default to receive.
Transmitting Packets
To transmit packets the number of transmit channels must match the number of channels the
packets were captured on. You must set the first channel and the required sequential
channels to transmit mode before attempting to transmit. In addition you must configure the
transmit channels to match the configuration of the channels on which the packets were
captured.
You can determine which channels need to be configured using:
dagbits-f traffic_file.erf
For example the information printed might be:
receive” after
Hyper-Channel
receive” or “transmit” into the configuration file all
Line five of
channel should be set up. The channel configuration for the above example may be:
To implement you configuration file use dagchan as follows:
dagchan –d0 –c channel_file
Connection ID
HDLC Connections
The first HDLC connection defined on the board is assigned connection ID 16. Each
subsequent connection is assigned a successive ID up to the limit of 496 connections.
A typical HDLC data stream is bit stuffed with a zero bit after every five consecutive one bits
to prevent confusion with the HDLC packet delimiter (0x7e or 0111 1110).
RAW Connections
Raw connections are assigned connection ID 0 through to ID 15. On a RAW connection there
is no bit unstuffing.
print 1: file offset 0x0 and print 2: file offset 0x48 indicates which
0 and 16 are not available as PCM 30 uses these for framing and signaling.
EDM01-12v18 DAG_3.7T_Card_User_Guide
Sub-channel Connection
A sub-channel connection is a connection which occupies one, two, four or seven consecutive
bits within a timeslot on one interface. The line would look like:
s chan_format ifc_num ts_num ts_mask
To configure a connection on interface 6, timeslot 2, bits 4-7, the line would look like:
S 0 6 2 0 0 0 0 1 1 1 1
One bit equals 8 kbps. For example, one timeslot at 64k consists of 8x8kbps in a sub-channel.
An 8kbps channel can extends 2 x 8k to 16k, 4 x 8k to 32k, or 7 x 8k to 56k.
Note: The DAG 3.7T does not support HDLC transmit on sub-channels.
Line Connection
A line connection is a connection which occupies all timeslots (i.e. full line rate) on one
interface. The line would look like:
l chan_format ifc_num
To configure a line connection on interface 0 it would look like:
1 0 0
RAW Connection
A RAW connection is a connection which occupies all timeslots on one interface and is in
RAW mode. RAW mode is when there is no de-framing, or bitunstuffing, only the raw data
from the timeslots read by the firmware. The line would look like:
r ifc_num
To configure a RAW connection on interface 4 it would look like:
r 4
Line RAW Connection
A line RAW connection with HDLC firmware is a connection which occupies all timeslots on
one interface. The line would look like:
lr chan_format ifc_num
To configure a raw line connection on interface 0 the line would look like:
1r 0 0
Channel RAW Connection
A channel RAW connection with HDLC firmware is a connection which occupies only one
timeslot on one interface. The line would look like:
cr chan_format ifc_num ts_num
To configure a raw connection on interface 5, timeslot 16, the line would look like:
cr 0 5 16
Hyper-Channel RAW Connection
A hyper-channel RAW connection is a connection which occupies one or more timeslots on
one interface. The line would look like:
hr chan_format ifc_num ts_num ts_num ts_num
The bit_offset field is reserved for future use and must be set to 0.
To configure a raw connection on interface 3, timeslots 0, 1, 2, 26, 27, 28, 29, the line would
look like:
A sub-channel RAW connection is a connection which occupies one, two, four or seven
consecutive bits within a timeslot on one interface. The line would look like:
sr chan_format ifc_num ts_num ts_mask
To configure a raw connection on interface 6, timeslot 2, bits 4-7, the line would look like:
sr 0 6 2 0 0 0 0 1 1 1 1
Delete Connection
Before you can delete a connection the connection must already exist. When you first start
dagchan there are no connections, so all connections that you want to create or delete must
exist in the .
d conn_num
To delete connection number 17, the line would look like:
You can define the ATM physical channels for the card by using the dagchan tool to read a
channel configuration file and then create each of the channels defined in that file.
one of the standard tools shipped with your Endace software and can be found in the
sub-directory.
dagchan is
tools
Note: To use
or the mixed firmware loaded on the card.
You can create a channel configuration file using any common text editor such as Notepad,
VI Editor, Emacs etc.
By default
dagchan deletes all existing channel definitions on the card, and then creates the
new channel definitions. Use this option if you are configuring a new card or if you want to
remove all existing definitions. However if the card you are configuring has existing channel
definitions that you want to retain you can just add new definitions by using the “
in the command line.
Configuration File
You can use the configuration file to do the following:
• Designate channels to either receive or transmit.
Note:The type of connections shown in the configuration file reflect the data that is
present on the network to which you are connected. Please ensure you understand
the type of connection you wish to monitor before beginning to configure the
interfaces.
Each line in the configuration file represents a different command. Each command begins
with a letter, followed by a sequence of one or more numbers. The following letters are valid
line beginnings:
dagchan to configure ATM channels you must have either the ATM firmware
-r” option
Command Description
simple connection,
delete connection,
hyper-channel connection,
line connection,
ATM scrambling on interface,
HEC correction.
Multiple Interfaces
If you wish to configure connections on multiple interfaces you need to repeat the
configuration procedure for each interface you want to monitor.
By default all new connections receive. To designate specific connections to transmit you
must type “
connection. All subsequent connections in the file also transmit unless you type “
after which all subsequent connections receive. This is shown in the sample
Connection45 (page ) chan.config file.
transmit” on the line of the file immediately before the configuration line for that
receive”
Hyper-Channel
Note:If you do not type either “
connections default to receive.
Transmitting Packets
To transmit packets the number of transmit channels must match the number of channels the
packets were captured on. You must set the first channel and the required sequential
channels to transmit mode before attempting to transmit. In addition you must configure the
transmit channels to match the configuration of the channels on which the packets were
captured.
You can determine which channels need to be configured using:
dagbits-f traffic_file.erf
For example the information printed might be:
Line five of
channel should be set up. The channel configuration for the above example may be:
The DAG 3.7T card is equipped to unscramble any interface using the self synchronizing
scrambling polynomial specified in ITU I.432. When an interface is unscrambled, all
connections on the interface will be unscrambled.
To enable scrambling on an interface, the line would look like:
t ifc_num
In order to configure interface 3 to unscramble ATM cells, the line would look like:
t 3
HEC Connection on Interface
The DAG 3.7T card can correct single bit errors in the HEC field as detailed in the ITU I.432
specification. When an interface is correcting HECs, all connections on the interface will be
corrected.
To enable HEC correction on an interface, the line would look like this:
f ifc_num
To configure interface 3 to perform HEC correction, the line would look like:
f 3
Delete Connection
Before you can delete a connection the connection must already exist. When you first start
dagchan there are no connections, so all connections that you want to create or delete must
exist in the .
d conn_num
To delete connection number 17, the line would look like:
The following is a list of the options available in
dagsnap.
Option Description
-d DEVICE
--device DEVICE
-h, -?
-j
-m NUM
-o FILE
--verbose
Use the DAG device referred to by DEVICE. Supported syntax includes
0, dag1, and /dev/dag3 to refer to DAG cards, and 0:2, dag1:0, and
/dev/dag2:0 to refer to specific streams on cards.
Display usage (help) information.
Maximize disk writing performance by only writing data to disk in
chunks. This option may not be available on all operating systems.
Write at most NUM megabytes of data per call to the DAG API (default
is 4 MiB).
Write the captured packets to FILE, in ERF format (default is standard
output).
Run for NUM seconds, then exit.
Increase output verbosity. When dagsnap is run with this command
three columns of data are reported every second. These columns
contain
1. The cumulative total of data written out from the DAG card.
2. The buffer occupancy. Small values indicate no packet loss.
3. The rate at which data is currently being written.
As the DAG 3.7T card captures packets from the network link, it writes a record for each
packet into a large buffer in the host computer’s main memory.
To avoid packet loss, the user application reading the record, such as
dagsnap, must be able to
read records out of the buffer as fast or faster than they arrive. If not the buffer will
eventually fill and packet records will be lost.
If the user process is writing records to hard disk, it may be necessary to use a faster disk or
disk array. If records are being processed in real-time, a faster host CPU may be required.
In Linux and Free BSD, when the computer buffer fills, the following message displays on
the computer screen:
kernel: dagN: pbm safety net reached 0xNNNNNNNN
The same message is also printed to log /var/log/messages file. In addition, when the
computer buffer fills the “Data Capture” LED on the card will flash or flicker, or may go OFF
completely.
In Windows no screen message displays to indicate when the buffer is full. Please contact
Endace Customer Support at
support@endace.com
for further information on detecting
buffer overflow and packet loss in Windows.
Detecting Packet Losses
Once the buffer fills, any new packets arriving will be discarded by the DAG 3.7T card until
some data is read out of the buffer to create free space.
You can detect any such losses by observing the Loss Counter
Record Format (ERF). See
Data Formats77 (page ) later in this User Guide for more
(lctr field) of the Extensible
information on the Endace ERF record format.
Increasing Buffer Size
You can increase the size of the host computer buffer to enable it to cope with bursts of high
traffic load on the network link.
For information on increasing the buffer size, see
Data captured in ERF format can be viewed with dagbits. For further details on how to use
dagbits, see dagbits52 (page ).
Note:
dagbits decodes and displays ERF header fields and packet contents are displayed
as a Hex dump only. To decode higher level protocols, Endace recommends using a
third party application, see
Examples
Using third party applications56 (page ).
Test live traffic on dag0, stream 0 for 60 seconds running the lctr, flags and fcs tests:
dagbits -vvc -d0:0 -s60 lctr flags fcs
To read a trace log file using dagbits:
dagbits -vvc print -f logname.log | less
To check for errors in the trace:
dagbits -vvc ltcr flags fcs -f logname.log
If dagbits reaches the end of the traffic and prints its report then the ERF records were valid.
dagbits
dagbits is a software utility used to view and test ERF records. dagbits can receive data
from either:
• directly from the DAG card (using the
• a ERF data file created by
dagsnap.
The following is a list options available in
-d option), or
dagbits:
Options Description
-16
-32
-c
--device DEVICE
-E NUM
-h, -?
-I
ERF records contain no Link-Layer CRCs.
ERF records contain 16 bit Link-Layer CRCs (PoS).
ERF records contain 32 bit Link-Layer CRCs (PoS and Ethernet).
Set legacy format to ATM (this is the default).
Treat ERF timestamps as big-endian.
Print real-time progress reports as dagbits captures traffic. This is a useful
indicator that a test is running correctly.
Sets CRC correction factor for BTX test (0, 16 or 32 bits).
Use the DAG device referred to by DEVICE. Supported syntax includes 0, dag1,
and /dev/dag3 to refer to DAG cards, and 0:2, dag1:1, and /dev/dag2:0 to refer
to specific streams on cards.
Introduces a NUM nanosecond delay between processing each record.
Set legacy format to Ethernet (default: ATM).
Halt operation after a maximum of NUM errors. This option prevents dagbits
from creating extremely large output files when being redirected to a file.
Read captured data from FILE.
Display usage (help) information.
Use "API" interface for live DAG API capture. Possible options are:
0 DAG 2.4 legacy API interface [dag_offset(3)].
1 DAG 2.5 API interface [dag_advance_stream(3)].
2 DAG 2.5 API interface [dag_rx_stream_next_record(3)].
Assume the ERF contains color information in the pad and offset bytes (for
Ethernet ERFs) or HDLC header bytes (for PoS ERFs) and display this
information as a packet classification and destination memory buffer.
Set the threshold for the jitter test to NUM microseconds.
Print the first NUM errored records only, and then continue to count errors
silently for the duration of the session.
dagbits takes several options that serve as parameters to particular tests. Available tests
Expected number of packets to receive. Returns an error if the actual number is
different.
Set legacy format to PoS (default: ATM).
DAG 3.5S capture parameters.
Quiet. This instructs dagbits to suppress summary information when
terminating. Error messages are not affected by this option.
Set legacy format record lengths to NUM.
When used in conjunction with the rlen test, indicates the RLEN of ERF records
to match against. NUM.
Check for strictly monotonic (increasing) timestamps, rather than monotonic
(non-decreasing). Affects the behavior of the mono test. With strict checking it
is an error for consecutive timestamps to be equal; they must always increase.
Terminate dagbits after NUM seconds of capture. This option only makes
sense when capturing packets from a DAG card (i.e. when used in conjunction
with the -d flag).
Terminate
Process at most NUM records in one pass. This option enables the user to
reduce the performance of
Increase verbosity of dagbits. This option increase the amount of data
displayed when printing an ERF record due to the print test or errors in other
tests. -v will print payload contents, -vv will print payload contents and an
accompanying ASCII dump of the packet payload.
Display version information.
Instruct dagbits to treat all warnings as errors.
When used in conjunction with the wlen test, the wire length of ERF records
must be exactly NUM bytes.
Stop when no traffic is received for one second.
if any ERF record type does not match NUM.
for various purposes. See also -D.
include monotonic time-stamp increment and frame checksum (FCS, aka CRC) validation.
See the
To convert a file from pcap format to ERF format, ensuring the ERF records are 64-bit aligned
(and therefore suitable for transmission using dagflood):
dagconvert -T pcap:erf -A 8 -i infile.pcap -o outfile64.erf
To capture from DAG Card 0 using a BPF filter:
dagconvert -d0 -o outfile.erf -b "host 192.168.0.1 and tcp port 80"
To capture from DAG card 0 using ERF filtering:
dagconvert -d0 -o outfile.erf -f "rx,a"
To capture from DAG card 0 to a series of files of size 128 MB:
dagconvert -d0 -o outfile.erf -r 128m
The first file created is labeled outfile0000.erf, once the file size reaches 128MB, a second
file is created. The second is labeled
outfile0001.erf etc.
third party applications
ATM traffic filtering (ATM, AAL5, MC_AAL5 record types) by VPI and VCI is also possible
by using the SUNATM DLT, which includes VPI/VCI information. The following example
shows how to use dagconvert to achieve this:
dagconvert is a software utility for converting data to various file formats. Supported formats
are:
File format Description
dag Read ERF records directly from DAG card (input only).
erf ERF (Extensible Record Format) file (input and output).
atm Legacy ATM files (input only).
eth Legacy Ethernet files (input only).
pos Legacy PoS files (input only).
null Produces no input or output.
pcap pcap(3) format file (input or output).
prt ASCII text packet dump (output only).
Data can be input from a file or captured from a DAG card. dagconvert can be used for
converting data captured from a DAG card to pcap format. This allows the trace file to be
used with tools that support the pcap file format. Also the reverse is possible, where data can
be converted to ERF format for use in other dag utilities. The following is a list of options
available in
-d DEVICE
--device DEVICE
-f FILTERS
-i FILES
|pcap|pos :
Note: Not all options are applicable to all DAG cards.
dagconvert.
Options Description
Set the record alignment of the ERF to NUM bytes (ERF only).
Specify a tcpdump(1) style BPF expression to be applied to the packets.
Specify the size (in bits) of the frame checksum (FCS) (pcap(3) only).
Use the DAG device referred to by DEVICE. Supported syntax includes 0,
dag1, and /dev/dag3 to refer to DAG cards, and 0:2, dag1:1, and
/dev/dag2:0 to refer to specific streams on cards.
A comma-delimited list of filters to be applied to the data. Supported filters
are:
• rx Filter out rx errors (link layer).
• ds Filter out ds errors (framing).
• trunc Filter out truncated packets.
•
Select fixed length output (ERF only).
Set the GMT offset to NUM seconds (pcap(3) only).
Display usage (help) information.
Name(s) of the input file(s). If more than one filename is given, the ERF
records from the files will be merged in timestamp order to the output.
Name of the output file.
Rotate the output file after NUM bytes. Add k (kilobytes), m (megabytes), g
(gigabytes) and
Set the snap length to NUM bytes.
Capture from the DAG card for NUM seconds.
Input and output types. See the DESCRIPTION section above for more
information about the input and output types.
Increase output verbosity.
Select variable length output (ERF only). Display version information.
This sets the pcap data link type to be used for BPF filtering (-b) and for
pcap output. Previously only one DLT was mapped to each ERF type.
The DAG 3.7T card is able to transmit as well as receive packets and can capture received
traffic while transmitting. This allows you to use capture tools such as
and
dagbits while dagflood is sending packets.
To configure the DAG 3.7T card for transmission, you must allocate some memory to a
transmit stream. By default, 16 MB of memory is allocated to the tx stream and the remainder
is allocated to the rx stream. For information on setting the Memory allocation see
28
(page ).
dagsnap, dagconvert,
mem
Note: You can not change the stream memory allocations while packet capture or
transmission is in progress.
Explicit Packet Transmission
The operating system does not recognize the DAG 3.7T card as a network interface and will
not respond to ARP, ping, or router discovery protocols.
The DAG 3.7T card will only transmit packets that are explicitly provided by the user. This
allows you to use the DAG 3.7T card as a simple traffic load generator.
You can also use it to retransmit previously recorded packet traces. The packet trace is
transmitted as fast as possible. The packet timing of the original trace file is not reproduced.
You can use dagflood to transmit ERF format trace files, providing the files contain only ERF
records of the type matching the current link configuration.
When you use DAG cards with multiple ports, ensure all ports referred to by the Trace file
are active. This ensures the
an inactive port. Check the interface status output for the DAG card and ensure the link
status for all required destination ports is active. See
34
)
dagflood traffic is not blocked when trying to delivering data to
Viewing the DAG card statistics.
(page
For further information on using
available from Endace Customer Support at
dagflood please refer to the EDM04-03 dagflood User Manual
https://www.endace.com/support
.
In addition the length of the ERF records to be transmitted must be a multiple of 64-bits. You
can configure this when capturing packets for later transmission by setting 64-bit alignment
using the
dagconfig align64 command.
If packets have been captured without using the align64 option you can convert the trace
files so that they can be transmitted by using
Alternatively if you are unsure if a trace file is 64-bit aligned you can test the file using
dagbits52 (page ) as shown below:
dagbits -v align64 -f tracefile.erf
If you do not have any ERF trace files available, you can use daggen to generate trace files
containing simple traffic patterns. This allows the DAG 3.7T card to be used as a test traffic
generator.
For further information on using
available from Endace Customer Support at
daggen please refer to the EDM04-06 Daggen User Guide
In normal circumstances when you run dagconfig, data is directed from the line directly to
the host computer.
However to enable any of the extended functions the data must be directed
• from the line, then
• to the XScale processor, then
• to the host computer.
All the “demo” tools listed in the section above do this by default. Alternatively you can use
dag_set_mux() function from the DAG 3.7T library.
the
Using the AAL Reassembler
The AAL Reassembler allows you to reassemble AAL5 or AAL2 frames on the DAG 3.7T
card without involving the host computer in processing. The reassembler receives ATM
traffic from the line and then sends it to the host either unchanged, dropped or reassembled
into AAL5 or AAL2 frames depending upon the configuration used.
You can use different configurations on different virtual connections, allowing only the
required data to be reassembled and other data to be either preserved or rejected.
•To configure an ATM connection to reassemble either AAL2 or AAL5 frames use
dagaal5demo ensuring you use the –x option to start the XScale on the first
connection:
•Configure as many additional connections to reassemble AAL frames as required. You
do not need to use the –x option on additional connections.
•Start capturing the data using:
dagsnap –d0 –v –o output_filename
For more information on the specific configuration options available for the AAL2/AAL5
reassembler, please refer to the EDM04-13 SAR API Programming Guide available from
Endace Support at
The Inverse Multiplexing ATM (IMA) functionality supports both IMA Monitor Mode and
IMA Transmit. Operationally there is no distinction between monitor and transmit except
that in the case of monitor mode the group is configured with receive links only. In transmit
mode the group is configured with both receive and transmit links.
For more information on the specific configuration options available for the IMA Monitor,
please refer to the EDM04-18 IMA Host API Programming Guide available from Endace
Support at
IMA Monitor
Note:The IMA Monitor is intended for use in wire-tap or monitoring mode. You can not
The IMA Monitor implements a subset of the IMA standard that allows you to monitor/tap
an IMA connection and receive fully de-multiplexed ATM cells, as if it were the receiver.
By default the IMA Monitor blocks ATM cells on all interfaces unless you configure a group
specifically or use auto-configuration. However running
configuration mode. In this mode the monitor will auto-configure any groups that it detects
on the line.
support@endace.com
.
use it to terminate an IMA connection.
dagimademo sets the monitor to auto-
• To run the IMA Monitor in auto-configuration mode on all interfaces use:
• If the IMA monitor detected groups on one or more of the interfaces you will be able
to start capturing the re-ordered cell data using:
Note: IMA transmit only supports symmetrical configuration
IMA transmit implements a subset of the IMA standard that allows you to terminate IMA
connections.When setting up IMA transmit, which requires both transmit and receive links,
you must configure the firmware to recognize the ERF header direction bit. This allows
packets to be directed to both the line and the host.
•To configure the firmware to recognize the ERF header direction bit use:
• Alternatively you can use an equivalent DAG 3.7T API function call to:
dag_set_mux
The file dagema_stub.c which can be found in the tools/embedded directory contains an
number of example of group configurations. You can run
groups on two DAG 3.7T cards. Please refer to the EDM04-18 IMA Host API Programming Guide available from Endace Support at
support@endace.com
functions.
Note:Before configuring a group you must ensure you are receiving cells from the card.
You can do this by running
dagbits for example. If you are not receiving cells, cells
destined for the host can become backed up in the DAG cards transmit path.
For Example
In this example there are two DAG cards configured as dag0 and dag1 and connected by at
least two physical links.
dagema_stub to create example
for definitions of the API
dag0 the transmit channels have channel ID 16 to 31 and the receive channels have
On
channel ID
16 to 31 and the transmit channels have channel ID 32 to 47.
32 to 47. On dag1 these are reversed with the receive channels having channel ID
To configure a group you can use:
There are a number of options available in
dagima_stub which you can use to query the state
of the group and it links.
To transmit ATM cells using IMA you must set the ERF headers IMA Group handle to
correspond to the group through which you want to transmit. You can use the program
imafllood located in tools/embedded which contains an example of how to transmit cells to
the intended group.
imaflood queries the group to determine how many cells it is expecting. This is important as
the requested number of cells are then transmitted. If you do not query the group first, the
host will flood the card with cells which will prevent IMA from receiving cells from the line.
The HDLC filter is designed to allow Layer 2 filtering and filtering on HDLC packets on the
DAG 3.7T card without involving the host computer in processing. The filter receives HDLC
traffic from the line and then either sends it to the host unchanged or dropped, depending
upon the filter configuration used.
By default the filter drops the packets that match the filter and sends all other packets to the
host. If you do not setup any filters all packets will be sent to the host. You can set up filters
using one or more of the
• To run the HDLC Filter on all interfaces with filters setup use:
• Start capturing the filtered data using:
dagsnap –d0 –v –o output_filename
For more information on the specific configuration options available for the HDLC Filter,
please refer to the EDM04-12 DAG 3.7T HDLC Filtering Guide available from Endace Support
at
support@endace.com
-l, -f or -m options.
.
Using HDLC and IMA Together
You can use IMA and the HDLC Filter at the same time by running dagimademo and
daghdlcdemo consecutively. This will allow you to capture both HDLC and ATM traffic on
the one DAG Card
Note:Ensure you do not use the
do you will restart the XScale and overwrite the configuration options set by the first
demo tool.
-x option with the second demo tool that you run. If you
DAG cards have sophisticated time synchronization capabilities. This allows for high quality
timestamps and optional synchronization to an external time standard.
The core of the DAG synchronization capability is known as the DAG Universal Clock Kit
(DUCK).
A clock in each DAG card runs independently from the computer clock. The DAG card’s
clock is initialized using the computer clock, and then free-runs using a crystal oscillator.
DUCK Configuration
Each DAG card's clock can vary relative to a computer clock, or other DAG cards.
The DUCK (DAG Universal Clock Kit ) is designed to reduce time variance between sets of
DAG cards or between DAG cards and coordinated universal time [UTC].
You can obtain an accurate time reference by connecting an external clock to the DAG card
using the time synchronization connector. Alternatively you can use the host computer's
clock in software as a reference source without any additional hardware.
Each DAG card can also output a clock signal for use by other DAG cards.
Common Synchronization
The DAG card time synchronization connector supports a Pulse-Per-Second (PPS) input
signal, using RS-422 signaling levels.
Common synchronization sources include GPS or CDMA (cellular telephone) time receivers.
Endace also provides the TDS 2 Time Distribution Server modules and TDS 6 expansion
units that enable you to connect multiple DAG cards to a single GPS or CDMA unit.
For more information, please refer to the Endace website at
https://www.endace.com/support, or the EDM05-01 Time Distribution Server User Guide.
NTP (Network Time Protocol) can be used to synchronize a computer clock to a network
based reference. When the NTP daemon starts, it exchanges packets with network time
servers to establish the correct time. If the computer clock is significantly different, the NTP
can adjust the computer clock in a single large 'step'. Over time, NTP adjusts the rate of
computer clock to minimize the offset from its reference. It can take several days for NTP to
fully synchronize the computer clock.
The DAG card clock is initialized from the computer's clock rather than from the NTP. Using
NTP to synchronize the computer's clock ensures the DAG card clock remains accurate.
DAG cards can also be synchronized to external references such as GPS or to the computer
clock directly. In both cases the computer clock time is loaded onto the DAG clock when the
DAG card is started (
When clock synchronization is enabled, the DAG card time is compared to the computer
time once per second, regardless of the synchronization source. If the times differ by more
than 1 second, the DAG card clock is reloaded from the computer clock and synchronization
is restarted. For this reason, the computer clock should be maintained with better than 1
second accuracy.
If the DAG card clock is synchronized to the computer clock, then small 'step' adjustments of
the computer clock by the NTP daemon can cause the DAG driver to emit warning messages
to the console and system log files if the adjustment exceeds the warning threshold. These
messages are intended to allow the user to monitor the quality of the clock synchronization
over time.
dagload, dagreset, dagrom -p).
The best synchronization is achieved when the DAG card is synchronized to an external GPS
reference clock, and the computer clock is synchronized to a local NTP server.
ERF files contain a hardware generated timestamp of each packet’s arrival.
The format of this timestamp is a single little-endian 64-bit fixed point number, representing
st
the number of seconds since midnight on the 1
January 1970.
The high 32-bits contain the integer number of seconds, while the lower 32-bits contain the
-32
binary fraction of the second. This allows an ultimate resolution of 2
seconds, or
approximately 233 picoseconds.
Different DAG cards have different actual resolutions. This is accommodated by the lower
most bits that are not active being set to zero. In this way the interpretation of the timestamp
does not need to change when higher resolution clock hardware is available. The DAG 3.7T
implements the 27 most significant bits which provides a time resolution of 7.5 nanoseconds.
The ERF timestamp allows you to find the difference between two timestamps using a single
64-bit subtraction. You do not need to check for overflows between the two halves of the
structure as you would need to do when comparing Unix time structures.
Example
Below is example code showing how a 64-bit ERF timestamp (erfts) can be converted into a
The DUCK is very flexible and can be used with or without an external time reference. It can
accept synchronization from one of several input sources and also be made to drive its
synchronization output from one of several sources.
Synchronization settings are controlled by the
Note: You should only run
dagclock after you have loaded the appropriate FPGA images.
dagclock utility.
If at any stage you reload the FPGA images you must rerun
configuration.
Note:when you run
dagconfig -d0 default the dagclock inputs and outputs are also
reset to defaults.
A description of each argument is shown below:
Option Description
-d DEVICE
--device DEVICE
Use the DAG device referred to by DEVICE. Supported syntax includes 0,
dag1, and /dev/dag3 to refer to DAG cards.
Display the information on this page
Wait for DUCK synchronization before exiting
Set the synchronization timeout in seconds (default is 60 seconds)
Set the Health threshold in nanoseconds. (default is 596ns)
Increase output verbosity
Display version information
Clear clock statistics
dagclock to restore the
Command Description
Set the
Clears the input and output settings.
Sets the
Sets the
Sets the
Sets the
Sets the
Output the selected input
Sets the
Internal output (master card)
Sets the DAG card's clock to computer clock time and clears clock statistics.
The DAG card takes approximately 20 to 30 seconds to re-synchronize.
Full clock reset. Load time from computer, set RS422in, none out. Clears
clock statistics. The DAG card takes approximately 20 to 30 seconds to resynchronize.
input and output to RS422 in and none out.
input to RS422.
input to Host (unused)
input to Internal input
input to Auxiliary input (unused)
output to repeat the RS422 input signal
output to host (unused)
Note: By default, all DAG cards listen for synchronization signals on their RS-422 port,
Statistics are reset to zero when the following occur:
• Loading a DAG driver
• Loading firmware
•
dagclock with a -x option
dagclock with a set or reset command.
•
Example
To view the default dagclock configuration:
dagclock –d0
The following is the output from DAG card that has its clock reference connected. The clock
statistics have been reset since the card was last synchronized. Note: Values will differ for
each DAG card type.
This line reports on the DAG card crystal oscillator.
Output Description
Actual The DAG card's crystal frequency calculated based on the reference clock.
Synthesized The target time stamping frequency. Different for each DAG card type.
Example
crystal Actual 100000028Hz Synthesized 67108864Hz
Input
This line reports on the time pulses received by the DAG card.
Output Description
Total The total number of time pulses received. Reset to zero when statistics are reset, see
Dagclock Statistics reset69 (page ).
Bad The number of time pulses that were rejected (considered Bad) by the DAG card. Reset
to zero when statistics are reset, see
Time pulses are considered
Bad if they were not received 1 second (approximately) after
the last time pulse. These may be caused by noise.
Singles missed The number of times a single time pulse failed to be received by the DAG card (i.e. a two
second gap).
Reset to zero when statistics are reset, see
Longest Sequence
Missed
This displays the longest time gap (in seconds) between a pair of time pulses. Reset to
zero when statistics are reset, see Dagclock Statistics reset69 (page ).
Example
input Total 3765 Bad 0 Singles Missed 5 Longest Sequence Missed 1
Start / Host / DAG
Dagclock Statistics reset69 (page ).
Dagclock Statistics reset69 (page ).
Output Description
Start This is the time statistics collection started. See Dagclock Statistics reset.69 (page )
Host Current Host (computer) time.
DAG The DAG card time at the last time pulse. If the DAG card has never been synchronized,
To obtain the best timestamp accuracy you should connect the DAG card to an external clock
reference, such as a GPS or CDMA time receiver.
To use an external clock reference source, the host computer’s clock must be accurate to UTC
to within one second. This is used to initialize the DUCK.
When the external time reference source is connected to the DAG card time synchronization
connector, the DAG card automatically synchronizes to a valid signal.
Pulse Signal from External Source
The DAG time synchronization connector supports an RS-422 (PPS) signal from an external
source. This is derived directly from an external reference source or distributed through the
Endace TDS 2 (Time Distribution Server) module which allows two DAG cards to use a
single receiver. It is also possible for more than two DAG cards to use a single receiver by
“daisy-chaining” TDS-6 expansion modules to the TDS-2 module. Each TDS-6, module
provides outputs for an additional 6 DAG cards.
You can connect the TDS 2 module to the DAG card using DUCK crossover cable76 (page )
(Note: A 4-pin to RJ45 adapter may be required). The TDS may be located up to 600m
(2000ft) from the DAG card depending upon the quality of the cable used, possible
interference sources and other environmental factors. Please refer to the EDM05-01 Time Distribution Server User Guide for more in formation.
Caution:
Never connect a DAG card and/or the TDS 2 module to active Ethernet equipment
or telephone equipment.
Testing the Signal
For Linux and FreeBSD, when a synchronization source is connected the driver outputs
messages to the console log file
To test the signal is being received correctly and has the correct polarity use the
as follows:
dagpps –d0
dagpps
measures the input state many times over several seconds, displaying the polarity and
When a single DAG card is used with no external reference, the DAG card can be
synchronized to the host computer clock. Most computer clocks are not very accurate by
themselves, but the DUCK drifts smoothly at the same rate as the computer clock.
The synchronization achieved with this method is not as accurate as using an external
reference source such as GPS.
The DUCK clock is synchronized to a computer clock by setting input synchronization
selector to overflow as follows:
If you are using two DAG cards in a single host computer with no reference clock, you must
synchronize the DAG cards using the same method if you wish to compare the timestamps
between the two DAG cards. You may wish to do this for example if the two DAG cards
monitor different directions of a single full-duplex link. You can synchronize the DAG cards
in two ways:
•One DAG card can be a clock master for the second. This is useful if you want both
DAG cards to be accurately synchronized with each other, but not so for absolute time
of packet time-stamps, or
•One DAG card can synchronize to the host and also act as a master for the second
Synchronizing with Each Other
Although the master DAG card’s clock drifts against UTC, the DAG cards will be locked
together. This is achieved by connecting the time synchronization connectors of both DAG
cards using a
required).
DAG card.
DUCK crossover cable76 (page ) (Note: A 4-pin to RJ45 Adapter may be
Configure one of the DAG cards as the master so that the other defaults to being a slave as
follows:
dagclock –d0 none overout
Output:
muxin none
muxout over
status Not Synchronised Threshold 596ns Failures 0 Resyncs 0
error Freq 0ppb Phase 0ns Worst Freq 213ppb Worst Phase 251ns
crystal Actual 100000000Hz Synthesized 67108864Hz
input Total 0 Bad 0 Singles Missed 0 Longest Sequence Missed 0
start Thu Apr 28 14:48:34 2007
host Thu Apr 28 14:48:34 2007
dag No active input - Free running
Note: The slave DAG card configuration is not shown as the default configuration will
To prevent the DAG card clock time-stamps drifting against UTC, the master DAG card can
be synchronized to the host computer’s clock which in turn utilizes NTP. This provides a
master signal to the slave DAG card.
Configure one DAG card to synchronize to the computer clock and output a RS-422
synchronization signal to the second DAG card as follows:
dagclock –d0 none overin overout
Output:
muxin over
muxout over
status Synchronised Threshold 11921ns Failures 0 Resyncs 0
error Freq -691ppb Phase -394ns Worst Freq 147ppb Worst Phase 424ns
crystal Actual 49999354Hz Synthesized 16777216Hz
input Total 87464 Bad 0 Singles Missed 0 Longest Sequence Missed 0
start Wed Apr 27 14:27:41 2007
host Thu Apr 28 14:59:14 2007
dag Thu Apr 28 14:59:14 2007
Note:The slave DAG card configuration is not shown, the default configuration is
DAG cards have an 8-pin RJ45 connector for time synchronization. The connector has two
bi-directional RS422 differential circuits, A and B. The Pulse Per Second (PPS) signal is
carried on circuit A, and the SERIAL packet is connected to the B circuit.
Pin Assignments
The 8-pin RJ45 connector pin assignments and plugs and sockets are shown below:
1.
2.
3.
4.
5.
6.
7.
8.
Out PPS+
Out PPS-
In PPS+
In SERIAL+
In SERIAL-
In PPS-
Out SERIAL+
Out SERIAL-
Normally, you connect the GPS input to the PPS (A) channel input (pins 3 and 6).
The DAG card can also output a synchronization pulse for use when synchronizing two
DAG cards (i.e. without a GPS input). The synchronization pulse is output on the Out PPS
channel (pins 1 and 2).
To connect two DAG cards, use a
DUCK crossover cable76 (page ) to connect the two time
synchronization sockets.
DUCK Crossover cable
To synchronize two DAG cards together use a cable with RJ45 plugs and the following
wiring.
TX PPS+ 13RX PPS+
TX PPS- 26RX PPS-
RX PPS+
RX SERIAL+ 47TX SERIAL+
RX SERIAL- 58TX SERIAL-
RX PPS- 62TX PPS-
TX SERIAL+ 74RX SERIAL+
TX SERIAL- 85RX SERIAL-
31
TX PPS+
Note:This wiring is the same as an Ethernet crossover cable (Gigabit crossover, All four
The DAG Card produces trace files in its own native format called ERF (Extensible Record
Format). The ERF type depends upon the type of connection you are using to capture data.
The DAG 3.7T supports the following ERF Types:
ERF Type Description
5
6
7
8
9
12
The ERF file contains a series of ERF records with each record describing one packet. ERF
files consists only of ERF records, there is no file header or trailer. This allows for simple
concatenation and splitting of files to be performed on ERF record boundaries.
TYPE_MC_HDLC:
Multi-channel HDLC Frame Record
TYPE_MC_RAW
ERF Multi-Channel Raw Link Data Record.
TYPE_MC_ATM
Multi-Channel ATM Cell Record
TYPE_MC_RAW CHANNEL
Multi-Channel Raw Link Data Record
All ERF records share some common fields. Timestamps are in little-endian (Pentium® native)
byte order. All other fields are in big-endian (network) byte order. All payload data is
captured as a byte stream in network order, no byte or re-ordering is applied.
The generic ERF header is shown below:
The fields are described below:
timestamp
type Bit 7 Extension header present.
flags
rlen
lctr
Bit 6:0 Extension header type. See table below:
The time of arrival of the cell, an ERF 64-bit timestamp.
This byte is divided into several fields as follows:
Bits Description
1-0: Binary enumeration of capture interface:
11 Interface 3 or D
10 Interface 2 or C
01 Interface 1 or B
00 Interface 0 or A
Cards with more than four interfaces typically use Multichannel ERF types
(type 5 to 9, 12 and 17) which provide a separate larger interface field.
2: Varying length record. When set, packets shorter than the snap length are not
padded and rlen resembles wlen.
When clear, longer packets are snapped off at snap length and shorter packets
are padded up to the snap length. rlen resembles snap length. Setting novarlen
and slen greater than 256 bytes is wasteful of bandwidth
3: Truncated record - insufficient buffer space.
• wlen is still correct for the packet on the wire.
• rlen is still correct for the resulting record. But, rlen is shorter than
expected from snap length or wlen values.
Note: truncation is depreciated and this bit is unlikely to be set in an ERF
record.
4: RX error. An error in the received data. Present on the wire
5: DS error. An internal error generated inside the card annotator. Not present on
the wire.
6: Reserved
7: Reserved
Record length in bytes. Total length of the record transferred over the PCI bus to storage.
The timestamp of the next ERF record starts exactly rlen bytes after the start of the timestamp
of the current ERF record.
Depending upon the ERF type this 16 bit field is either a loss counter of color field. The loss
counter records the number of packets lost between the DAG card and the stream buffer due
to overloading on the PCI bus. The loss is recorded between the current record and the
previous record captured on the same stream/interface. The color field is explained under
the appropriate type details.
Wire length. Packet length "on the wire" including some protocol overhead. The exact
interpretation of this quantity depends on physical medium. This may contain padding.
extension
headers
Extension headers in an ERF record allow extra data relating to each packet to be transported
to the host. Extension header/s are present if bit 7 of the type field is '1'. If bit 7 is '0', no
extension headers are present (ensures backwards compatibility).
Note: There can be more than one Extension header attached to a ERF record.
Payload
Payload is the actual data in the record. It can be calculated by either :
1ST Rec. This is the first record received since this connection was
configured.
Note: When using this record type with the DAG 3.7T card the Interface number is 0, and
the connection number is defined by the programmed context.
When using this record type with the DAG 7.1S card the interface number is used
for the four ports, and the connection number is the VC identifier, as defined in the
EDM01-17 DAG 7.1S Card User Guide.
Type Bit 7 1 = Extension header present. See Extension Headers86 (page ).
Bits 6:0 Type 7
Short description TYPE_MC_ATM
Long description Type 7 Multi-channel ATM Cell Record
Use This record format is for ATM cells on channelized data links. For example; E1, T1 and J1.
The TYPE_MC_ATM record is shown below:
The following is a description of the
Field Description
flags
(1 byte)
MC header
(4 bytes)
ATM header
(4 bytes)
Payload
(bytes of cell)
This field is the same as normal ERF types but capture interface is always zero.
• Fixed length mode not supported.
• RX Error is set if any MC Header Error bit is set.
Protocol header. This field is divided into the following:
0-9: Connection number (0-1023). 512 connections are supported by DAG 3.7T card.
10-14: Reserved.
15: Multiplexed from IMA group into ATM stream.
16-19: Physical port [0-15] cell was captured on.
20-23: Reserved.
24: Lost Byte. The internal datapath had an unrecoverable error.
25: HEC corrected.
26: OAM Cell CRC-10 Error [not implemented].
27: OAM Cell.
28:
29-31: Reserved.
Protocol header. The ATM HEC channel is not captured. This record has a fixed length of 72
bytes. This does not include the 8-bit HEC.
Payload = 48 bytes of cell - HEC (1 byte)
TYPE_MC_ATM record format:
Bit Description
For the DAG 7.1S card refer to EDM01-17 DAG 7.1S Card User Guide for details.
Refer to the Channelized Configuration > Configuration File.
When bit 15 of the MC Header is set the bottom 9 bits (Connection Number/IMA
ID) shall be treated as an IMA Group ID instead of a connection number.
Physical ID is interpreted from the firmware perspective. For example, if a cable is
plugged into port 0, examining the ERF MC Header field will give a Physical ID of
11. This is a little counter-intuitive and reflects the internal processing required.
From the software/user perspective, this could be interpreted as the Logical ID, and
as such, we can convert from the Logical to Physical ID using the provided dagutil
function, dagutil_37t_line_get_logical which will return the Software
Physical ID/Firmware Logical ID. In this case, assuming data is coming in on a cable
plugged into port 0, we will convert 11 back to 0.
1st Cell. This is the first cell received since this connection was configured.
1st Rec. This is the first record received since this connection was
configured.
Note: When using this record type with the DAG 3.7T card the Interface number is 0, and
the connection number is defined by the programmed context.
When using this record type with the DAG 7.1S card the interface number is used
for the four ports, and the connection number is the VC identifier, as defined in the
DAG 7.1S Card User Guide.
which will return the Software Physical ID/Firmware Logical ID. In this case, assuming
ERF 9. TYPE_MC_AAL5
Type Bit 7 1 = Extension header present. See Extension Headers86 (page ).
Bits 6:0 Type 9
Short description TYPE_MC_AAL5
Long description Type 9 Multi-channel AAL5: Multi-channel AAL5 Frame Record
Use This record format for reassembled ATM AAL5 frames from channelized data links. For
example; E1, T1, J1.
The TYPE_MC_AAL5 record is shown below:
The following is a description of the
TYPE_MC_AAL5 record format:
Field Description
flags
(1 byte)
This field is the same as normal ERF types but capture interface is always zero.
• Fixed length mode not supported.
• RX Error is set if any MC. Header Error bit is set.
wlen
(2 bytes)
MC header
(4 bytes)
ATM header
(4 bytes)
Payload
(bytes of
AAL5 frame)
This contains the length of the AAL5 frame including the ATM Header but not including the ERF
Header. The ERF record will always be 64 bit aligned, if the AAL5 frame is not 64 bit aligned the
record will be padded at the end of the record with the value 0x00. This padding will not be
included in the
count.
Protocol Header. This field is divided into the following:
Bits Attributes
0-10: Connection number (0-2047). 512 connections are supported by DAG 3.7T card.
11-15: Reserved.
16-19: Physical port (0-15) cell was captured on. Physical ID is interpreted from the firmware
perspective. For example, if a cable is plugged into port 0, examining the ERF MC
Header field will give a Physical ID of 11. This is a little counter-intuitive and reflects
the internal processing required. From the software/user perspective, this could be
interpreted as the Logical ID, and as such, we can convert from the Logical to Physical
ID using the provided dagutil function, dagutil_37t_line_get_logical
data is coming in on a cable plugged into port 0, we will convert 11 back to 0. For the
7.1S this field is always 0.
20: CRC checked.
21: CRC error.
22: Length checked.
23: Length error.
24-27: Reserved.
28:
29-31: Reserved.
Protocol Header. This does not include the 8-bit HEC.
Type Bit 7 1 = Extension header present. See Extension Headers86 (page ).
Bits 6:0 Type 12
Short description TYPE_MC_AAL2
Long description Type 12 Multi-channel AAL25: Multi-channel AAL2 Frame Record
Use This record format is for channelized links is the same as the normal ERF Types but capture
interface is always zero.
The TYPE_MC_AAL2 record is shown below:
The following is a description of the
TYPE_MC_AAL2 record format:
Field Description
flags
(1 byte1)
This field is the same as normal ERF types but capture interface is always zero.
• Fixed length mode not supported.
• RX Error is set if any MC Header Error bit is set.
MC header
(4 bytes)
ATM header
(4 bytes)
Payload
(bytes of
AAL5 frame)
Protocol header. This field is divided into the following:
Bits Attribute
0-9 Connection number (0-1023).
512 connections are supported by DAG 3.7T card.
10-12 Reserved for possible extra connection numbers
13-15 Reserved for indication of AAL2 type (a value of 0x0 indicates a SSSAR packet).
16-19 Physical port (0-15) cell was captured on.
Physical ID is interpreted from the firmware perspective. For example, if a cable is
plugged into port 0, examining the ERF MC Header field will give a Physical ID of 11.
This is a little counter-intuitive and reflects the internal processing required. From the
software/user perspective, this could be interpreted as the Logical ID, and as such, we
can convert from the Logical to Physical ID using the provided dagutil function, dagutil_37t_line_get_logical which will return the Software Physical
ID/Firmware Logical ID. In this case, assuming data is coming in on a cable plugged
into port 0, we will convert 11 back to 0. For the 7.1S this field is always 0.
20 Reserved
21 1st Cell. This is the first cell received since this connection was configured.
22 MAAL Error (errnum as specified in ITU I.363.2 is copied to the data part of this
record)
23 Length Error
24-31 Channel Identification Number (cid)
Protocol header. This does not include the 8-bit HEC.
The addition of an Extension Header into the ERF record allows extra data relating to the
packet to be transported to the host. The extension header allows certain features to be added
independently of ERF types, for example, features shared by different ERF records do not
have to be implemented separately. This results in automatic support across ERF types.
Bit 7 of the ERF type field is used to indicate that Extension Header's are present. If set to '1'
Extension Headers are present. The Extension Header type field indicates the type and
format of the Extension Header. It also indicates whether further Extension Headers are
present. If bit 7 of the Extension Header is set to '1' further Extension Headers exist in the
record. The Extension Headers are 8 bytes in length.
The following diagram shows presence of an Extension Header in addition to the ERF record.
The following diagram shows presence of two Extension Headers with Bit 7 of the first
Extension Header set to '1'.
If you have problems with a DAG 3.7T card or Endace supplied software which you are
unable to resolve, please contact Endace Customer Support at
support@endace.com
Supplying as much information as possible enables Endace Customer Support to be more
effective in their response to you. The exact information available to you for troubleshooting
and analysis may be limited by nature of the problem.
The following items may assist in a quick resolution:
• DAG 3.7T card[s] model and serial number.
• Host computer type and configuration.
• Host computer operating system version.
• DAG software version package in use.
• Any compiler errors or warnings when building DAG driver or tools.
• For Linux and FreeBSD, messages generated when DAG device driver is loaded.
These can be collected from command
• Output of
• Firmware versions from
daginf.
dagrom –x.
• Physical layer status reported by:
• Link statistics reported by:
dagconfig –si
dmesg, or from log file /var/log/syslog.
dagconfig
•Statistics either (depending on the DAG card):
.
• Extended statistics reported by: dagconfig –ei
• Universal statistics reported by: dagconfig –ui
• Network link configuration from the router where available.
• Contents of any scripts in use.
• Complete output of session where error occurred including any error messages from
DAG tools. The
typescript Unix utility may be useful for recording this information.
• A small section of captured packet trace illustrating the problem.
• If you have just rebooted and the system can not see any DAG cards, you need to load
17 August 2008 Released. Added loss values to the mode information. Added caution
about high gain modes affect on configured but unconnected
interfaces.
18 November 2008 Updated Buffer_size and mem dagconfig tokens and associated cross
references. Updated front matter. Update dagconfig options table.
Added new dagrom options. Supported OS information now in
release notes. Added card description to the overview. Updated Pod
Racket mount information.
Status Description
Preliminary The products described in this technical document are in development and have yet to
complete final production quality assurance.
Released The products described in this technical document have completed development and final