The Action Table

The Action Table lets you set an action when certain packets are being received using many criteria.

• Every received packet is going through the action table.
• Even if a packet matches an action it goes on trying to match other actions.
• In the snapshot example every IP packet emitted by 00E029:003C85 will be logged in /tmp/tst1.log.
• In the snapshot example every ICMP packet will make the computer ring then will summon a window showing the packet.

Columns:

• Leave the cursor on any column button to summon a help balloon describing the column and showing keyboard shortcuts.
• Left click on any column button to sort the table using this column.
• Drag the column button edges to resize the column.
• To match a hexadecimal string you can use "{ }", for example to match "Login" you can use { L o g i n } or { 1a 3c 6f 29 }.
  

Information:

	Action type
	Source host type (MAC address / Logical Net. Id - Node Id / IP / Host Name / Name)
	Source host global or regular expression match
	Destination host type (MAC address / Logical Net. Id - Node Id / IP / Host Name / Name)
	Destination host global or regular expression match
	Source IP type (IP / Host Name)
	Source IP global or regular expression match
	Destination IP type (IP / Host Name)
	Destination IP global or regular expression match
	Protocol global or regular expression match

Action type:

• LOG : Log the summarized packet to a file. (See an example here)
• LOG+ : Log the summarized packet and the full hexadecimal content to a file. (See an example here)
• ALARM : Make the computer ring.
• RUN : Run an external program with the summarized packet as argument.
• WIN : Pop up a window.

Items:

• Leave the cursor on any column truncated item to summon a balloon showing full item.

Buttons:

• Leave the cursor on any button to summon a help balloon describing the button and showing keyboard shortcuts.

Actions:

	Left click to reset the columns (default columns size will be restored) Right click to reset the buttons state (default buttons state will be restored)
	Left click to mask the column (the column will disappear from the table)
	Left click to memorize the columns (columns size will be restored as is when the application will start) Right click to memorize the buttons state (buttons state will be restored as is when the application will start)
	Left click to add the action (the current action will be added to the table)
	Left click to modify the action (the selected action will be replaced by the current action)
	Left click to clear the action (the current action will be cleared)
	Left click to delete the action (the selected action will be deleted)
	Left click to move the action up (the selected action will be moved up)
	Left click to move the action down (the selected action will be moved down)
	Left click to reset the table (every action will be deleted)
	Left click to print the table (the table will be printed or snapshot to a file)
	Left click to export the table (the table will be exported in a readable text file)
	Left click to load the table (the table will be loaded with a previous saved table) Right click to enable/disable the auto load (the table will auto load the last loaded file on start up)
	Left click to save the table (the table will be saved to a file)

Misc:

The progress meter shows the percent of table used, each table has a maximum number of items set using arguments

This icon is a figure, it means that you can use the corresponding key or figure button to mask/sort the column

© 1997-2002 Jean-Hugues ROYER (JoHeR). All rights reserved. E-mail: phnetprobe@joher.com Web: http://www.joher.com/pnp/