Printer FriendlyEmail Article Link

Avalanche: How to import a pcap trace SAPEE and replay the capture?

Answer

Before importing the pcap, there are a few settings that should be preconfigured.

 - Go to Administration | Appliances or Spirent TestCenter - Add the Appliance or Spirent TestCenter chassis and reserve the ports.

 - Go to File | New - create a new project and create an Advanced Device Test.

 - Reserve the ports for the Avalanche server - In order to create and associate the Server Profiles automatically, at least one port is needed for the server. 

Step 1: Importing Pcap

 - Go to Tools | Import Pcap File to start the Wizard. 

 - Then click Browse to select a pcap file to import. 

Step 2: Select The Test

 - Select your Project.

 - Select the Test within your Project. 

 - Click Browse to create/select a SAPEE Resource Directory. 

  • If you are using SAPEE for the first time, you will not see anything in the Browse field.
  • Enter a logical name for the directory where you would want to keep files related to the particular pcap.
  • You can reuse the directory to add more pcaps; however it is recommended to create a new folder to keep pcaps separated for better file management.  

 

 - Once you have created a new SAPEE directory, click OK and then click Next.

Step 3: Import Filters

 - Use to filter out to filter any packets on your pcap if needed, otherwise click Next.

Step 4: Options

Check all three boxes are recommended. 

 - Automatically Build Playlist

  • Playlist will include all the sessions inside the pcap.  You can choose to playback the selected sessions and create your own playlist.  Let the wizard build the basic playlist and then you can edit the playlist by adding or deleting the sessions no needed.  

 - Append to Actions List

  • It will appends the necessary actions URL to an existing Actions list selected. 
  • You can also create a new action list append to the action URL.  Recommendation - create a new action list.

 - Automatically Build Servers, Subnets and Associations

  • It will create all the necessary Server Profiles, Subnets, and Associations for your test.  The step is recommended.  

   

 

Lastly configure the Avalanche Client Subnets, Client Port, and Client Associations.   

 - Client | Subnets - configure the IP address, Netmask, Gateway if needed.

 - Client | Ports - add the port(s) for the clients.

 - Client | Associations - select the correct profiles for your SAPEE test e.g. select the SAPEE actions that was created. 

 

Done.  The test is ready to Run.  

 

 

Note SAPEE Restrictions:

  • Minimum interpackets delay should be 20ms or more.
  • Some files may not work if it contains any layer 2-3 packets and no layer 4-7 payload i.e. no Multicasts.
  • Streams can be added only from the same Resource Directory that the playlist is in.  If you want to playback two different pcaps, make sure you put them in the same resources directory.  
  • Playback pcaps with multiple sessions/streams with same destination IP and Port are not allowed and not supported.  In this case use Wireshark's Follow TCP Stream to filter out a single stream before importing your pcap. 
  • An action profile can only contain one SAPEE action.  To run multiple SAPEE actions, create additional action profiles for them and enable the action profiles in the Client Associations. 
  • PCAP names cannot contain special; spaces & hyphens are not allowed. The resulting error: the SAPEE test will not run and the Event log will report “invalid close”.

Product : Avalanche