Setting up Analysis Profile

Owned by Akin Laseinde (Deactivated)
Last updated: Dec 13, 2024
2 min read

An Analysis Profile in AGILITY enables users to configure traffic decoding settings at runtime. This includes specifying protocol decoding ports, tshark flags, and trace display filters to customize network traffic analysis

Setting up Analysis Profile

 

AGILITY comes with a default analysis profile. However, to create a new profile, follow these steps:

  1. Navigate to the Analysis Profile Section:

    • Go to Application > Analysis Profile > Edit Analysis Profile > New Profile.

image-20241213-160753.png

  1. Set Up the Profile:

    • Name: Input a name for this analysis profile in the Name text box.

    • Description: Provide a brief description of the profile's purpose. You have the option to mark this profile as the default by checking the corresponding box. Uncheck it if this is not the default profile.

    • User: Enter the user associated with this profile.

  2. YAML Configuration:

    • Paste the YAML configuration into the provided text box. Below is a sample configuration:

 

image-20241213-161518.png

 

protocols: - protocol: HTTP2 ports: [8080, 443] - protocol: VXLAN ports: [4789] filters: exclude: - packets: "ARP, SSDP" flags: enable_sequence_number_analysis: true

  1. Save and Close:

    • Save the profile and it will be available for use.

Â