OmniAnalysis Platform

Gigabit Analyzer Card X-Series Getting Started Guide

Copyright 2007, WildPackets, Inc. All rights reserved. Information in this document is subject to change without notice. No part of this document may be reproduced or transmitted in any form, or by any means, electronic or mechanical, including photocopying, for any purpose, without the express written permission of WildPackets, Inc. AiroPeek SE, AiroPeek NX, AiroPeek VX, EtherPeek SE, EtherPeek NX, EtherPeek VX, Gigabit Analyzer Card (GAC), GigaPeek NX, iNetTools, NAX, NetDoppler, NetSense, Network Calculator, Omni, Omni Capture Engine, Omni Desktop Engine, Omni DNX Engine, OmniEngine Desktop, OmniEngine Enterprise, OmniEngine Manager, OmniEngine Workgroup, Omni Management Console, Omni PacketGrabber, Omni Virtual Network Service, OmniPeek, OmniPeek Enterprise, OmniPeek Enterprise Connect, OmniPeek Personal, OmniPeek Workgroup, OmniPeek Workgroup Pro, OmniPeek Personal, Omnipliance, OmniSpectrum, PacketGrabber, Peek DNX, ProConvert, ProtoSpecs, RFGrabber, RMONGrabber, WAN Analyzer Card (WAC), WANPeek NX, WildPackets, WildPackets Academy, and WildPackets OmniAnalysis Platform are trademarks of WildPackets, Inc. All other trademarks are the property of their respective holders. WildPackets, Inc. reserves the right to make changes in the product design without reservation and without notification to its users.

Contacting WildPackets
Mailing Address WildPackets, Inc. 1340 Treat Blvd., Suite 500 Walnut Creek, CA 94597 Voice/Fax 8 AM - 5 PM (PST) (925) 937-3200 (800) 466-2447 (US only) Fax: (925) 937-3211 info@wildpackets.com Sales sales@wildpackets.com Web http://www.wildpackets.com Technical Support http://www.wildpackets.com/support Resources See http://www.wildpackets.com/support/resources for white papers, tutorials, technical briefs and more.

ii

Professional Services
WildPackets offers a full spectrum of professional services, available onsite or remote, to help customers make the most of their network infrastructure investment. The WildPackets Professional Services team stands ready to partner with you to maximize your network performance and to minimize your network downtime. WildPackets technical instructors, network systems engineers, and custom software developers can help you design, build, manage, and secure a better network for your business. See http://www.wildpackets.com/services for course catalog, current public course scheduling, web-delivered courses, and consulting services. WildPackets Academy (800) 466-2447 training@wildpackets.com

Product Support and Maintenance

WildPackets Maintenance Programs ensure that you grow along with our products as new features and enhancements are added and that your usage is fully supported by our Technical Services staff. Enhanced support services are available with remote or onsite consulting. Developer support is also available for customers adding custom enhancements to WildPackets products. All Maintenance inquiries and purchases can be accommodated by contacting sales@wildpackets.com.

Developer Community
To join the WildPackets Developer Network and gain access to product plugins, plugin wizards, and API documentation, please visit http://wpdn.wildpackets.com.

About WildPackets, Inc.

Since 1990, WildPackets has been developing innovative, high-quality, easy-to-use and valuable solutions to maintain the health and integrity of critical data-in-motion. From the desktop to the datacenter, from wireless LANs to Gigabit backbones, on local segments and across distributed networks, WildPackets products enable IT organizations to quickly find and fix problems affecting mission-critical network services. WildPackets products are sold in over 60 countries through a broad network of channel and strategic partners. More than 5,000 customers across all industrial sectors, including 80% of the Fortune 1000, use WildPackets products daily to troubleshoot networks and maximize network uptime. For further information, please visit www.wildpackets.com.

20070621-E-GACX_OP50

iii

SAFETY AND REGULATORY NOTICES

Please read this section before attempting to install, test, or use the WildPackets Gigabit Analyzer Cards. Protection provided by the equipment may be impaired if it is used in a manner that is not in accordance with these instructions. Warning: Before installing the Gigabit Analyzer Card (GAC), ensure that all power is disconnected from the PC in which it is to be installed. Warning: Some components on the card will get hot during normal use. The card MUST be allowed to cool for 10 minutes prior to handling.

Class 1 Laser Product

Warning: This product may be fitted with optical transmitter modules which are Class 1 lasers. Use of controls, adjustments or performance of procedures other than those specified herein may result in hazardous light exposure.

ESD Precautions
Caution: It is essential that you fit an anti-static wrist strap and observe all conventional ESD precautions when handling the Gigabit Analyzer Card. Avoid contact with backplane components and module connectors, etc.

EMC Class A Statement (USA)

This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a commercial installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference, in which case the user will be required to correct the interference at his own expense. The supplier is not responsible for any radio or television interference caused by using other than recommended cables and connectors or by unauthorized changes or modifications to this equipment. Unauthorized changes or modifications could void the users authority to operate the equipment.This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.

EMC Class A Statement (Europe and Japan)

Warning: This is a Class A product. In a domestic environment this product may cause radio interference, in which case the user may be required to take adequate measures.

iv

Contents
Gigabit Analyzer Card X-Series . . . . . . . . . . . . . . . . . . . . . 1
GAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 GAC XL-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2 GAC XL-4T . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3 GAC XL 2+2T . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3 LED status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4 Installing the GAC. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Cabling examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Connecting to a tap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5 Connecting to a span port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5 Troubleshooting the GACs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Verifying card status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6 Verifying link status of the GAC. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8 Configuring hardware profiles for GACs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Configuring hardware profiles on OmniPeek. . . . . . . . . . . . . . . . . . . . . . . . . . . . .9 Configuring hardware profiles on an OmniEngine. . . . . . . . . . . . . . . . . . . . . . 12 Technical specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Contacting WildPackets support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Gigabit Analyzer Card X-Series

The WildPackets Gigabit Analyzer Card (GAC) X-Series uses state-of-the-art hardware and FPGA technology to provide high-performance analysis of Gigabit networks. The GAC supports up to four half-duplex Gigabit Ethernet channels or two full-duplex links. Data from 100MB and 1GbE links can be merged for monitoring both sides of a router simultaneously. The GAC can be attached via taps, matrix switches, or at a switch span port. Taps and matrix switches provide completely passive monitoring that does not affect the network, even in power loss conditions. The GAC is available is in three different configurations:

XL-4: Consists of four SFP cages (SFP modules not included) XL-4T: Consists of four RJ45 10/100/1000Base-T ports XL 2+2T: Consists of two RJ45 10/100/1000Base-T ports and two SFP cages (SFP modules not included)

This Getting Started Guide explains how to install and troubleshoot the GAC in computers running a WildPackets OmniPeek analyzer or on distributed OmniEngines. It also explains how to use an OmniPeek analyzer to setup hardware profiles for the GAC that allow you to implement packet slicing, error packet capture, and address or port filters before starting a capture on an OmniPeek analyzer or OmniEngine. For more information on using the GAC with the OmniPeek analyzer or the OmniEngine, please refer to the documentation and online help that ships with these products. In addition, the WildPackets web site has up-to-date software and support at www.wildpackets.com.

Gigabit Analyzer Card X-Series Getting Started Guide

GAC
The three available configurations of the GAC X-Series differ only in the available connections on the back panel of each card. These configurations allow you to match different media for your network: copper (CX), single mode fiber (SX), multi-mode fiber (LX), and 10/100/1000 Base-T. Note The GAC XL-4 and XL 2+2T includes four and two SFP cages, respectively. Each SFP cage accommodates a single SFP module (not included). A pair is required for full-duplex links.

GAC XL-4
The back panel of the GAC XL-4 has four SFP cages, four Link Status LEDs, and two Card Status LEDs.
Link Status LEDs
Channel 1 Channel 3

SFP Cages

Card Status LEDs

Reserved

1 Channel 2 Channel 4

4 Mode

Channels

GAC XL-4 LEDs and SFP cages

2 GAC

Gigabit Analyzer Card X-Series Getting Started Guide

GAC XL-4T
The back panel of the GAC XL-4T has four RJ45 ports, four Link Status LEDs, and two Card Status LEDs.
Link Status LEDs
Channel 1 Channel 3

RJ45 Ports

Card Status LEDs

Reserved

1 Channel 2 Channel 4

4 Mode

Channels

GAC XL-4T LEDs and RJ45 ports

GAC XL 2+2T
The back panel of the GAC XL 2+2T has two SFP cages, two RJ45 ports, four Link Status LEDs, and two Card Status LEDs.
Link Status LEDs
Channel 1 Channel 3

SFP Cages

RJ45 Ports

Card Status LEDs

Reserved

1 Channel 2 Channel 4

4 Mode

Channels

GAC XL 2+2T LEDs, SFP cages, and RJ45 ports

GAC XL-4T 3

Gigabit Analyzer Card X-Series Getting Started Guide

LED status
The following table describes the states of the LEDs on the GAC.
Status LED Link Status: Channels 1 - 4 Card Status: Mode Green Link up POST complete Flashing Green Transmitting or Receiving data

Installing the GAC

The GAC must be installed in computers running either an OmniPeek analyzer or an OmniEngine. Remove any SFPs from the GAC before installing or uninstalling the GAC in the computer. This allows for easier installation or removal from the computer. To install the GAC: 1. Remove the card from the ESD bag. CAUTION! Observe normal ESD precautions when handling or placing the card on a surface. 2. Turn OFF power to the computer and disconnect the power cord. 3. Remove the cover from the computer case. 4. Locate an unused, unobstructed, 3.3V keyed PCI-X expansion slot and remove the expansion slot cover. 5. Insert the card in the expansion slot; press down firmly until it clicks into place; then replace the slot cover screw. 6. Attach the cables to the SFPs or RJ45 ports on the card (see Cabling examples on page 5). 7. Replace the computer case, connect the power cord, and turn power ON. 8. When the card is detected at reboot, follow the installation instructions to load the GAC driver (xygbl1x_1.sys) for your operating system. The driver and driver installation instructions can be found in the drivers folder where the WildPackets OmniPeek analyzer or OmniEngine was installed. For example C:\Program Files\WildPackets\OmniPeek\Driver.

4 Installing the GAC

Gigabit Analyzer Card X-Series Getting Started Guide

Cabling examples
The following examples describe how to connect the cables from the GAC to a full-duplex tap and to a span port on a switch.

Connecting to a tap
The GAC can be connected to one tap, via Channels 1 and 2, or to a second tap, via Channels 3 and 4. To connect a fiber (SX or LX) cable to a tap: 1. Connect the duplex cable to the Tap 1 and Tap 2 SC connectors of the tap. 2. Connect one fiber from the duplex cable to each channel by plugging it into the Rx (receiving) fiber inputs of the SFP.

Connecting to a span port

To connect the fiber (SX or LX) cables to a span port on a switch: 1. Connect the duplex cable to Channel 1 (Rx and Tx) or to Channel 2 (Rx and Tx). Note Each fiber SFP supports two fibers, one for input (Rx) and the other for output (Tx). 2. Connect the duplex cable to the span port on the switch.

Cabling examples 5

Gigabit Analyzer Card X-Series Getting Started Guide

Note You can also connect each channel to a different span port, allowing you to monitor and capture from more than one switch at the same time.

Troubleshooting the GACs

When the connection for one or more channels is down or degraded, you can use a known good test cable to connect the card to itself in order to facilitate troubleshooting and help to isolate the source of trouble.

Verifying card status

If the Link LEDS do not illuminate, or if the card is not seen after starting the application, it may indicate a potential PCI-X configuration problem. First determine if the operating system recognizes that the card is present and functional: 1. Right-click on My Computer and click on Manage, then Computer Management (Local) followed by System Tools and Device Manager to open the Device Manager: 2. Under Network adapters verify that the card is present and functional. If the card is NOT present: 1. Reboot the PC to see if the card is then detected. 2. If the card is detected on reboot, follow the installation instructions to load the drivers for your operating system. 6 Troubleshooting the GACs

Gigabit Analyzer Card X-Series Getting Started Guide

3. If the card is not detected on reboot, try plugging the card into a new PCI-X slot. If the card is then detected, suspect a PCI-X configuration problem. 4. If the card is still not detected in the new slot, replace the card. If the card is present but NOT working: 1. Right-click the GAC and select Properties, to open the Properties dialog for this card.

2. In the General view of the Properties dialog, use the drop-down list in the Device usage section to disable the card, and click OK. 3. Repeat the process by using the drop-down list to re-enable the card, and click OK. 4. If this fails, open the Driver view and verify the Driver Version number. 5. Attempt to re-install or update the driver. For details, see the Readme in the folder where the OmniPeek analyzer or OmniEngine was installed. For example C:\Program Files\WildPackets\OmniPeek\Driver. 6. If this is not successful, plug the card into a new PCI-X slot. If the card is then detected, suspect a PCI-X configuration problem. 7. If the card is still not detected, replace the card.

Verifying card status 7

Gigabit Analyzer Card X-Series Getting Started Guide

Verifying link status of the GAC

1. Remove the cables from two of the channels and replace with test cable as shown below in in the following figure:

2. If the two links are established, this will indicate that both channels, including the SFPs, are functional. An external connection issue should then be investigated. If both links are NOT established using the Link Status test steps above, users of fiber SFP modules may attempt a further test to isolate individual SFP modules. Note Both the Rx and Tx sides of the connection are contained in a single jack for 1000Base-TX SFPs, The following steps can only be used to test fiber (SX or LX) SFP modules, which have separate Rx and Tx connectors.

8 Troubleshooting the GACs

Gigabit Analyzer Card X-Series Getting Started Guide

To test fiber SFP modules individually: 1. Connect the test cable as shown below:

2. Each channel should auto-negotiate with itself, turning its Link Status LED green. 3. If a single failing channel is identified, substitute the corresponding channels SFP module. 4. If substitution of the SFP does not resolve the problem, replace the card.

Configuring hardware profiles for GACs

Hardware profiles are filters that you can configure on the GAC before beginning a capture in OmniPeek or on an OmniEngine, letting you to cut down on the amount of traffic in the capture buffer. Packet slicing, error packet capture, and address or port filters are implemented on the card in hardware.

Configuring hardware profiles on OmniPeek

The Hardware Profiles view of the Capture Options or Monitor Options dialog allows you to define and manage hardware profiles that are used with the GACs in OmniPeek. To select a previously defined hardware profile: 1. Open the Capture Options or Monitor Options dialog. 2. Select Hardware Profiles view. All currently defined hardware profiles are listed in this view.

Configuring hardware profiles for GACs 9

Gigabit Analyzer Card X-Series Getting Started Guide Duplicate Edit Delete Insert

Import Export

3. Select a hardware profile to implement on the GAC. Only one hardware profile can be implemented on a GAC at one time. 4. Click OK. Note Click the Help button on the dialog to learn more about the available options and settings. To create a new hardware profile: 1. Open the Capture Options or Monitor Options dialog. 2. Click the Hardware Profiles view. 3. Click the Insert icon. The Insert Hardware Profile dialog appears.

10 Configuring hardware profiles for GACs

Gigabit Analyzer Card X-Series Getting Started Guide

4. Complete the dialog:

Profile: Type a name for the profile. Color: Select a color for the profile. Comment: Type a comment to provide a more complete description of the hardware

profiles properties.

Slice packets to bytes (all channels): Select this option to enable packet slicing on

the card. The minimum entry is 16 bytes, and the length must be a multiple of 8 bytes. We recommend keeping the slice value at 128 bytes or greater.

Apply Channel 1 filter settings to all channels: Select this option to assign the same

properties to all channels as they are defined in the Channel 1 tab. Clear the check box if you want to define properties separately for each channel.

Discard error packets: Select this option to discard error packets. Reject packets matching this filter: Select this option to pass packets to OmniPeek

that do not match this filter.

Address filter: Select this check box to specify a filter parameter based on address. Port filter: Select this check box to specify a filter parameter based on address.

Configuring hardware profiles on OmniPeek 11

Gigabit Analyzer Card X-Series Getting Started Guide

5. Click OK to accept your changes. The new hardware profile is listed in the Hardware Profiles view. Note Hardware profiles on the Gigabit Analyzer Cards automatically compensate for packets with Cisco ISL tags and 802.1Q VLAN tags, correctly identifying ports and addresses regardless of the presence of these tags. To export selected hardware profiles: 1. Select the hardware profiles in the Hardware Profiles view, right-click, and choose Export Selected. A Save As dialog appears. 2. Specify the location and name under for the hardware profiles (*.flt) file. Note Hardware profiles and the software filter files used in OmniPeek share the same *.flt file extension. OmniPeek can distinguish between hardware and software filters. For information on software filters, see the OmniPeek User Guide or online help.

Configuring hardware profiles on an OmniEngine

When a GAC is the selected adapter on an OmniEngine, the Hardware Profiles tab appears in the Adapter Options dialog.

12 Configuring hardware profiles for GACs

Gigabit Analyzer Card X-Series Getting Started Guide

Delete Duplicate Edit Insert

Import Export Uncheck All Refresh

Click here to send changes

To create a new hardware profile on an OmniEngine: 1. Select a GAC adapter from the Adapters tab of the OmniEngines window. 2. Click Options for the adapter. The Adapter Options dialog appears. 3. Click the Hardware Profiles tab. 4. Click the Insert icon. The Insert Hardware Profile dialog appears. 5. Complete the Insert Hardware Profile dialog. Note Click the Help button on the dialog to learn about the available options and settings. 6. Click OK to add the new hardware profile to the list of profiles. 7. Click the Click here to send changes message to send your changes to the OmniEngine. Important! Because the hardware profile definitions reside on an OmniEngine, you must send all changes to an OmniEngine when you use the Insert, Edit, Duplicate, or Delete functions. The Export and Import icons open Save As and file Open dialogs that point to the computer on which the OmniPeek console is running.
Configuring hardware profiles on an OmniEngine 13

Gigabit Analyzer Card X-Series Getting Started Guide

Technical specifications
The following table lists the technical specifications for the GAC:
Specification Electrical Rating* Description 3.3V DC 5.0A 5.0V DC 0.5A Combined power requirement < 25 Watts *Class III Equipment for supply by SELV circuits only

Environmental Condition: Operating Temperature Operating Relative Humidity Pollution Degree II External Connections Four ports for connection of Small Form Pluggable (SFP) modules or RJ45 connectors 10C to 50C (measured around the card) 20% to 80%

Contacting WildPackets support

Please contact WildPackets support at http://www.wildpackets.com/support/contact if you have any questions about the installation and use of the GAC. An RMA (Return Material Authorization) number must be obtained from WildPackets before returning hardware. Please contact WildPackets support at http://www.wildpackets.com/support/contact to obtain an RMA number.

14 Technical specifications