PCAPng Application

The PCAPng application reads the various blocks in the received PCAPng files and validates the blocks to be sent to the destination application or to the tools. The PCAPng file contains the following blocks:

  • Mandatory Blocks
    • Section Header Block (SHB)
  • Optional Blocks
    • Interface Description Block (IDB)
    • Enhanced Packet Block (EPB)
    • Simple Packet Block
    • Name Resolution Block
    • Interface Statistics Block

The actual packets are present in the Enhanced Packet Block. The block data is parsed to find the start and end offset of the valid packets and the packet is sent out to the next application.

Note:  Only one EPB in a PCAPng file is supported.

The PCAPng application processes the data depending on the packet type that contains a combination of the blocks mentioned above:

Block Combination

Process

SHB+IDB+EPB+data

Packets are parsed, validated, and the data packet is sent out.

SHB+IDB

Packets are dropped.

EPB+Data

Packets are parsed, validated, and the data packet is sent out.

The PCAPng application validates if the incoming data matches any of the above three formats in the same order, and processes the packets accordingly.

The following figure shows a sample PCAPng file format that contains one section header block:

Create Link Between UDP-in-GRE Tunnel and PCAPng Application

To create a link with source as UDP-in-GRE tunnel and destination as PCAPng application:

  1. In the GigaVUE‑FM canvas, select New > New Tunnel, drag and drop a new tunnel template to the workspace. The Add Tunnel Spec quick view appears.
  2. On the New Tunnel quick view, enter or select the required information as described in the following table.

    Field

    Description

    Alias

    The name of the tunnel endpoint

    Note: Do not enter spaces in the alias name.

    Description

    The description of the tunnel endpoint

    Type

    Select UDPGRE as the tunnel type

    Traffic Direction

    The direction of the traffic flowing through the V Series node

    • Choose In (Decapsulation) for creating an Ingress tunnel, traffic from the source to the V Series node

    IP Version

    The version of the Internet Protocol. Select IPv4 or IPv6

    Remote Tunnel IP

    The IP address of the tunnel source

    Key

    GRE key value

    Source L4 Port

    Layer 4 source port number

    Destination L4 Port

    Layer 4 destination port number. You can configure only 4754 or 4755 as the destination UDP ports

  3. Click Save.
  4. Click and drag the PCAPng application into the canvas. Configure the alias for the application.
  5. Select the App mode from the available options Primary or Secondary. Refer to for details.
  6. Establish a link between the UDP-GRE TEP configured above and the PCAPng application.

Create Link Between PCAPng Application and Other Destinations

Create a link with source as PCAPng application and destination as one of the following:

  • Other GigaSMART applications such as Slicing, Masking, etc.
  • Other encapsulation TEPs.
  • REP/MAP

Ericsson vTAP Domain Tagging Support

The PCAPng application now supports Ericsson vTAP domain tagging. It reads PCAPNG payloads carried in vTAP GRE‑in‑UDP tunnels and identifies the Ericsson domain. Refer to 5G-Service Based Interface Application for more details.

When you enable domain classification, the PCAPng application:

■   Detects Ericsson vTAP PCAPNG payloads using the vTAP GRE key.
■   Classifies packets into domains. (For Example: pc-mm, pc-sm, ccsm-5gc..etc)
■   Applies VLAN tags on egress using the Domain VLAN Mapping table. Each domain maps to one VLAN ID, and you can also set a separate VLAN ID for failed SBI transactions. Supported VLAN IDs range from 1 to 4094.
■   If the application cannot classify a packet (for example, because metadata is missing), it uses the VLAN ID you configure for unclassified or failed traffic.

Configure the PCAPng Application for Domain Tagging

1.   In the canvas, drag and drop the PCAPng application and select Details. The PCAPng application quick view appears.
2. On the application quick view, enter or select the required information as described in the following table:.

Field

Description

Application

The name Pcapng appears by default.

Alias

Enter an Alias as required.

App Mode

Set App Mode to Primary to view and configure domain related options.

Note:  Primary mode is required to configure domain classification. When you set App Mode to Secondary, Domain Classification, Domain VLAN Mapping, and Flow Timeout fields are not visible.

Domain Classification

Enable the Domain Classification option to classify Ericsson vTAP traffic by domain.

Domain VLAN Mapping
● From the Domain VLAN Mapping list, select the VLAN mapping profile that maps Ericsson domains to VLAN IDs for per-domain tagging on the egress tunnel.
● Click Add New to create a new 5G-Apps configuration. Refer to Adding CSV file for IP Mapping section in 5G-Service Based Interface Application for details.

When Domain Classification is enabled, the selected Domain VLAN Mapping is used to tag packets per Ericsson domain with the configured VLAN ID (and, if applicable, a separate VLAN ID for failed SBI transactions) before sending traffic to the probes.

Flow Timeout

Set the Flow Timeout value in seconds to define how long an inactive Ericsson vTAP flow is kept before it is closed and its resources are released.

Valid range: 360-1860

Default value: 660

What's Next

You can configure the traffic health monitoring for this application in the THRESHOLDS tab. You can select an existing template from the Threshold Templates drop-down menu or provide the threshold values. For more details on Traffic health monitoring and how to create threshold template, refer to Traffic Health Monitoring.

You can view the configuration health status and the traffic health status of the application in the HEALTH STATUS tab. For more details on configuration health and traffic health, refer to Monitor Cloud Health.

You can view the statistics of the application in the STATISTICS tab.