Knowledge base: Download Area > ByteBlower > Tools
ByteBlower 2.x remote capture tool
Posted by Admin Kayako, Last modified by Wouter Debie on 15 February 2019 11:57 AM

ByteBlower 2.x remote capture tool.

Sometimes it becomes handy if the user could capture on a ByteBlower port.  This is possible using the ByteBlower Tcl API.  But what if the Tcl API is not available or Tcl is not installed on the PC?

Hello byteblower-remote-capture!  byteblower-remote-capture is a command line tool which enables the user to start and stop captures on a ByteBlower server.  The result will be saved on the local PC. 

Note: Rx and Tx capture only supported on servers running version 2.9. Prior systems capture only RX

You can find the tool at following location: https://setup.byteblower.com/software.html#Tools

The tool can be configured using command line arguments:

Argument name Description Notes
--server, -s The (remote) ByteBlower server to capture on.  
When this option is not given, localhost will be used. (handy for use on a ByteBlower server)
optional
--interface, -i The name of the ByteBlower interface to capture on.
Examples: trunk-1-1, nontrunk-1
required
--out, -o The name of the file in which the results must be stored.  Only PCAP is supported for now.
Warning: If the given file name already exists, the file will be overwritten!
required
--filter, -f A well formed BPF capture filter to use.  This can be used to only select a portion of the incoming data optional
--snaplen Snaplen in bytes ( Note: Supported since ByteBlower server 2.9 ) optional

Examples:

  • byteblower-remote-capture --server byteblower-1.excentis.com --interface nontrunk-1 --filter "ip host 10.0.0.1 and ip host 10.0.0.2" --out example1.pcap
  • byteblower-remote-capture --server byteblower-1.excentis.com --interface trunk-1-1 --filter "ip host 10.0.0.2 and udp dst 1000" --out example2.pcap

Known issue:

If you run the byteblower-remote-capture tool and you get following error:
wouter@wouter-VirtualBox ~/Downloads $ ./byteblower-remote-capture -s byteblower-dev-1300-1.lab.byteblower.excentis.com -i nontrunk-1 -o t.pcap
terminate called after throwing an instance of 'std::bad_cast'
  what():  std::bad_cast
Aborted (core dumped)

Please update your remote-capture-tool to the latest 2.9 version. Older versions of the capture-tool aren't compatible with the latest ByteBlower 2.9 Server
(0 vote(s))
Helpful
Not helpful

Comments (8)
Wittmann Peter
15 September 2015 03:50 PM
Hello, is the capture also possible with a test running at the same time?
Dries Decock
16 September 2015 08:50 AM
Hi Peter,

capturing and executing a test at the same time is indeed supported and one of the major benefits of this tool.

Kind regards,
Dries
LALEG Ismael [EXT]
23 December 2015 11:29 AM
Hello,
I didn't understand how can I install the excutable ?
Best regards.
Ismaël.
Dries Decock
09 February 2017 10:40 AM
Hi Ismaël,

the links should be fine now.
Oleg Greenberg
11 May 2017 12:50 PM
Hi,
Using this tool in automation is problematic, since requires sending CTRL^C. It would be useful to have time parameter, like "-t 300".
Dries Decock
11 May 2017 01:05 PM
Hi Oleg,

thanks for your suggestion. I will take this in consideration for our next release. For automation, you can also use our Tcl API and achive the same goal.

Kind regards,
Dries
Oleg Greenberg
16 May 2017 11:36 AM
do you have a TCL API demo for capture?
Vincent De Maertelaere
18 May 2017 08:29 AM
Hi Oleg,

This is possible. The How-To is described here: https://support.excentis.com/index.php?/Knowledgebase/Article/View/73/

Best Regards,
Vincent

We to help you!