Reference

Reference documentation of monitoring stats

Push PCAP

Push PCAP takes the capture systems stored data and splits into PCAP files and pushes them to some other location. The following stats are avalible in both JSON Syslog and Promethues

push_pcap_status

for every PCAP file generated

This is the top level full status of an individual PCAP file.

Value	Desc
1	If all Local Remote and Match statuses are good
0	One or more of Local, Remote, match status is in a failure condition

push_pcap_local_bps

for every PCAP file generated

This is the data rate for a specific PCAP write this to the local storage device.

push_pcap_local_bps = total bytes * 8 / total time

push_pcap_local_byte

for every PCAP file generated

This is the total bytes for a PCAP write to the local storage device.

push_pcap_local_status

for every PCAP file generated

Indicates the status of the specific PCAP file. Table below shows the meaning

Value	Desc
1	Local file has been generated and is > 0 bytes
0	Failure condition

push_pcap_local_time

for every PCAP file generated

The number of seconds it took to create the local file.

NOTE: this is an integer value

push_pcap_localremote_size_missmatch

for every PCAP file generated

Indicates the status of local vs remote PCAP file comparision

Value	Desc
1	Local and Remote file are > 0 bytes Local number of bytes == Remote number of bytes
0	Failure condition

Value

Desc

Local and Remote file are > 0 bytes

Local number of bytes == Remote number of bytes

Failure condition

push_pcap_remote_bps

for every PCAP file generated

This is the data rate for a specific PCAP write this to the remote storage device.

push_pcap_remote_bps = total bytes * 8 / total time

push_pcap_remote_byte

for every PCAP file generated

This is the total bytes for a PCAP written to the remote storage device.

push_pcap_remote_status

for every PCAP file generated

Indicates the status of the specific PCAP file. Table below shows the meaning

Value	Desc
1	Remote file has been generated and is > 0 bytes
0	Failure condition

push_pcap_remote_time

for every PCAP file generated

The number of seconds it took to create and copy the PCAP from the local storage location to the remote storage location.

NOTE: this is an integer value