| 44.1. TRFA resource | ||
|---|---|---|
 | Chapter 44. TRFA - Traffic Analyzer |  |
| 44.1. TRFA resource | ||
|---|---|---|
| | Chapter 44. TRFA - Traffic Analyzer | |
The Abilis TRFA resource is divided in two section:
IP Traffic Analyzer;
Phone Traffic Analyzer.
The Abilis IP TRFA resource provides the following features:
Configures each IP interface for the desired capture detail (TOTALS, by IP, by PROTOCOL, by IP and PROTOCOL). The configuration parameters related to this function are present in the IP resource configuration.
Shows the total traffic for each interface.
Shows the traffic by IP address.
Shows the traffic by protocol/applications (FTP, TELNET, etc.).
Shows the traffic by IP address and a protocol/application.
Shows the desired traffic types of the last day/week/month/year.
Shows the traffic as individual interface or all summed interfaces.
Shows graph or table view.
Results are presented using the Abilis HTTP server (see HTTP resource).
The Abilis CTI TRFA resource provides the following features:
Analysis the calls for DISA service and sub-service.
Analysis the calls for a specific called number.
Analysis the calls for a specific Abilis user.
Shows the quantity of calls by types (answered, abandoned, busy, any failed, etc) of the last day/week/month/year and now.
Shows the average time of calls (Wait time before answering, Duration, Wait time before abandoning).
Shows graph or table view.
Results are presented using the Abilis HTTP server (see HTTP resource).
![[Note]](../images/note.png) | Note |
|---|---|
The Phone TRFA for DISA service it's only for DISA service
|
Configuring the TRFA resource and the section inside the IP resources are needed to activate the IP Traffic Analyzer.
Add the resource to the Abilis system with the following command:
[11:01:39] ABILIS_CPX:a res:trfa
RES:TRFA ALREADY EXISTSThe TRFA resource may already exist in the system, but may not yet be active: set it active with the command:
[11:01:48] ABILIS_CPX:s act res:trfa
COMMAND EXECUTED![[Caution]](../images/caution.png) | Caution |
|---|---|
After adding or setting the TRFA active, you must restart the Abilis to make the resource running (use the command warm start to reboot the Abilis). |
[11:01:39] ABILIS_CPX:s p trfa act:yesCOMMAND EXECUTED [11:01:39] ABILIS_CPX:d p trfaRES:Trfa ---------------------------------------------------------------------- Run DESCR:Traffic_Analyzer LOG:DS ACT:YES rt-max-clients:20 WDIR:C:\APP\TRFA\ - IP section ----------------------------------------------------------- ACT-IP:YES max-addresses:1000 max-png:5 - CTI section ---------------------------------------------------------- ACT-CTI:YES - Cti Router --------------------------------------------------------- N1:# N1-NAME: N2:# N2-NAME: N3:# N3-NAME: N4:# N4-NAME: N5:# N5-NAME: N6:# N6-NAME: N7:# N7-NAME: N8:# N8-NAME: N9:# N9-NAME: N10:# N10-NAME:
Use the following command to display the parameters of the resource; the d p trfa ? command shows the meaning of parameters.
[17:06:43] ABILIS_CPX:d p trfa
RES:Trfa ----------------------------------------------------------------------
Run DESCR:Traffic_Analyzer
LOG:DS ACT:YES rt-max-clients:20
WDIR:C:\APP\TRFA\
- IP section -----------------------------------------------------------
ACT-IP:YES max-addresses:1000 max-png:5
- CTI section ----------------------------------------------------------
ACT-CTI:YES
- Cti Router ---------------------------------------------------------
N1:# N1-NAME:
N2:# N2-NAME:
N3:# N3-NAME:
N4:# N4-NAME:
N5:# N5-NAME:
N6:# N6-NAME:
N7:# N7-NAME:
N8:# N8-NAME:
N9:# N9-NAME:
N10:# N10-NAME:
Meaning of the most important parameters:
LOGLogging functionalities activation/deactivation.
ACTRuntime TRFA activation/deactivation.
rt-max-clientsNumber of monitors that can require information from TRFA [1..50]. NOTE: an equal of greater number of HTTP sessions must be available.
WDIRDirectory where traffic data files are stored. It cannot be empty. Physical full path in DOS notation, i.e. starting with a drive letter in the range ['A'..'Z'] and ending with the '\' character. Max. 128 characters. Case is preserved. Spaces are allowed. Strings holding spaces must be written between quotation marks (E.g.: "C:\My dir\").
ACT-IPIP traffic analysis activation [NO, YES].
max-addressesMaximum number of pair IPP + IP address in the address table [2..8000].
max-pngMaximum number of PNG shell objects that will be used for create PNG files [1..20].
ACT-CTICTI traffic analysis activation [NO, YES].
N1..N10Numbers set. Calls with called number (CD) that matches Nxx are counted in the TRFA statistics of number set with Nxx-NAME. Search for match is performed sequentially from N1 to N10. From 1 up to 20 characters, in the range ['0'..'9', '*'] optionally preceded by TON [u, i, n, o, s, h, c] and/or NP [x, e, d, t, l, p] attributes or "*" or "#" or the name of an IN/RU/MR list between single quotes (e.g. 'listname' or # or ux123* or 555 or *). The '*' is allowed only alone or as the last character. See HELP ISDN ATTRIBUTES for details on attributes.
N1-NAME..N10-NAMENumbers set name. Up to 16 characters. Spaces are not allowed. Case is preserved. If name is cleared, the numbers set statistics are cleared.
The following command allows the administrator to change the configuration of the resource:
s p trfa parameter:value...
| Caution |
|---|---|
To activate the changes made on the upper case parameters, execute the initialization command init trfa; while to set act the changes made on the lowercase parameters a save conf and an Abilis restart are required (i.e. With warm start command). |
Use the command below to activate the IP Traffic Analyzer:
[17:45:30] ABILIS_CPX:s p trfa act-ip:yes
COMMAND EXECUTED | Caution |
|---|---|
To activate the changes made, execute the initialization command init trfa. Remember to save the configuration (save conf). |
To activate the traffic survey for an IP resource, type:
[17:45:32] ABILIS_CPX:s p ip-1 trfa:yesCOMMAND EXECUTED [17:45:41] ABILIS_CPX:d p ip-1RES:Ip-1 - IP over LAN (LAN) -------------------------------------------------- Run DESCR:LAN OPSTATE:UP LOG:NO STATE-DETECT:NORMAL LANRES:Eth-1 IPADD:192.168.029.254 MASK:255.255.255.000 REDIS:EXT HIDE:NO RP:NONE IPSEC:NO VRRP:NO NAT:INSIDE UPNP:NO DIFFSERV:NO DDNS:NO OUTBUF:100 OUTQUEUE:FAIR MTU:1500 OUTSPL:NO INBUF:0 mru:1500 SRCV:NO - TRFA section --------------------------------------------------------- TRFA:YES TRFA-MODE:TOTALS - Lan ------------------------------------------------------------------ LLOG:NO arpcache:200 CACHETIMER:120 rxbuf:4 txbuf:14 VLAN-ID:UNTAG RES:Eth-1 --------------------------------------------------------------------- Run DESCR: LOG:DS MODE:AUTO DUPLEX:HALF MAC-ADDR:FACTORY (00-E0-C5-54-A2-78) dma-rxbuf:250 dma-txbuf:25 max-vlans:0 ip-rxbuf:25 arp-rxbuf:5 pppoed-rxbuf:5 pppoes-rxbuf:25
| Caution |
|---|---|
To activate the changes made, execute the initialization command init res:ip-1. Remember to save the configuration (save conf). |
In the “TRFA Section” the following parameters will appear:
TRFAEnables/disables traffic analysis.
TRFA-MODESelect traffic analysis mode [TOTALS:
saves the total global traffic; PROT:
subdivides the registration for the main protocol models;
IP: saves the totals for every single IP
address; IP-PROT: subdivides the traffic by
protocol, for every single crossing IP address];
IP-RESERVEReserves records in the traffic analysis data base: it represents the maximum IP number trace.
TRFA-SIDESelects IP address type [LOCAL: analyse
destination IP address in output packets and source IP in input
packets; REMOTE: analyse source IP address in
output packets and destination IP address in input packets,
applying address translation if packets have been natted to/from
the remote IP resource].
TRFA-IPADDIP address filter:
- '*': any IP address.
- 'LOCALNET': allowed only for
TRFA-SIDE:LOCAL.
- a single IP address or two IP addresses separated by ':' (colon) [1.0.0.0-126.255.255.255, 128.0.0.0-223.255.255.255].
- the name of an IP/IR list between single quotes (E.g.: * or LOCALNET or 150.1.1.1 or 192.1.0.0:192.1.0.9 or 'List').
Use the command below to activate the Phone Traffic Analyzer:
[17:45:32] ABILIS_CPX:s p trfa act-cti:yes
COMMAND EXECUTED | Caution |
|---|---|
To activate the changes made, execute the initialization command init trfa. Remember to save the configuration (save conf). |
To activate the traffic survey for an DISA service, type:
[17:45:32] ABILIS_CPX:s ctidisa service:test trfa:normalCOMMAND EXECUTED [17:45:41] ABILIS_CPX:d ctidisa service:testTotal number of services:2 ------------------------------------------------------------------------------- SERVICE:test DESCR: MODE: ACD |INTRO-STATE: CREQ |INTRO: ROUTING: PREFIX |CONN-DELAY: 0 |WELCOME: MAX-CALLS: NOMAX |PC-OFFER: * |INITDIAL: test BC: Speech |TRANSFER: NO |AFTERPIN: # CB: NO |ACD-INTERVAL: 15 |LOOPDIAL: CB-DELAY: 5 |DIAL-TOUT: 30 |IDENFAIL: CB-NRTY: 1 |PIN-TOUT: 15 |CALLNA: CB-UNK-CDO: 'CGI' |NUM-TOUT: 15 |ALERT: test CB-NAT-CDO: 0'CGI' |BUSYDISC: 4 |BUSY: CB-INT-CDO: 00'CGI' |LOOP-BUSY: YES |NOANSWER: CB-CGO: # |LOOP-NOANSWER: YES |DISC: CTIP-TYPE-O: * |LOOP-DENIED: YES |HOLD: AUTO-CDO: 9999 |LOOP-OTHER: YES |BYE: # TOUT-CDO: # |MAX-LOOPS: 99 END-CDO: # |MAX-LOOPS-CDO: # PERMIT: * |TRFA: NORMAL CDI: 777 CGI: # SUB-SERVICE: # -------------------------------------------------------------------------------
| Caution |
|---|---|
To activate the changes made, execute the initialization command init res:ctidisa. Remember to save the configuration (save conf). |
| Note |
|---|---|
The Phone TRFA it's possible to activate only for DISA service
|
To activate the traffic survey for a specific called number (222), type:
[17:45:32] ABILIS_CPX:s p trfa n1:222 n1-name:sip_phoneCOMMAND EXECUTED [17:45:41] ABILIS_CPX:d p trfaRES:Trfa - Not Saved (SAVE CONF), Not Refreshed (INIT) ------------------------ ------------------------------------------------------------------------ Run DESCR:Traffic_Analyzer LOG:DS ACT:YES rt-max-clients:20 WDIR:C:\APP\TRFA\ - IP section ----------------------------------------------------------- ACT-IP:YES max-addresses:1000 max-png:5 - CTI section ---------------------------------------------------------- ACT-CTI:YES - Cti Router --------------------------------------------------------- N1:222 N1-NAME:sip_phone N2:# N2-NAME: N3:# N3-NAME: N4:# N4-NAME: N5:# N5-NAME: N6:# N6-NAME: N7:# N7-NAME: N8:# N8-NAME: N9:# N9-NAME: N10:# N10-NAME:
| Caution |
|---|---|
To activate the changes made, execute the initialization command init trfa. Remember to save the configuration (save conf). |
To activate the traffic survey for a specific user, type:
[14:53:20] ABILIS_CPX:s pref user:test cti-trfa:yesCOMMAND EXECUTED [14:53:28] ABILIS_CPX:d pref user:testParameter: | Value: --------------------+---------------------------------------------------------- USER: test ID: 8 <Read Only> LAST-CHANGE: 03/10/2015 15:02:30 CET <Read Only> PWD: *** - CTIP not active -- - CLUS not active -- - IAX not active --- -------------------- SIP-CLIP: TRANSP SIP-ACTION: ADVANCED (No rules) SIP-CF-RULE: ALWAYS SIP-CF-TOUT: 15 SIP-CF-DLY: 10 SIP-CF-FORK-TYPE: STD SIP-CF-CDO: # SIP-CF-CGO: * SIP-VM: NO SIP-VM-RULE: NOANS,OTHERS SIP-VM-TOUT: 15 SIP-PC-OFFER: 4 SIP-MAIL-FAIL: NO SIP-MAIL-FWD: NO SIP-MAIL-SEIZED: NO - VO not active ---- -------------------- VM-RCPT-LIST: # VM-RCPT: VM-OGM-MSG: Message VM-END-MSG: SYS -------------------- MAIL-BODY: SYS MAIL-RCPT-LIST: # MAIL-DFT-RCPT: -------------------- CTI-CALLS-LOG: YES CTI-CALLS-LOG-IN: 200 CTI-CALLS-LOG-OUT: 200 -------------------- CTI-TRFA: YES -------------------- CALLTRY-TOUT: SYS CALLTRY-NRTY: SYS -------------------- TON-TO-PREFIX: SYS -------------------- ON-DEMAND-VR: NO ON-DEMAND-VR-RCPT: -------------------- OPC-MAIN-INTERFACE: SIP -------------------------------------------------------------------------------
| Caution |
|---|---|
Remember to save the configuration (save conf). |
| |  | |
| Chapter 44. TRFA - Traffic Analyzer |  | 44.2. TRFA Traps |