Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Current »

An Analysis Profile in AGILITY enables users to configure traffic decoding settings at runtime. This includes specifying protocol decoding ports, tshark flags, and trace display filters to customize network traffic analysis

Setting up Analysis Profile

AGILITY comes with a default analysis profile. However, to create a new profile, follow these steps:

  1. Navigate to the Analysis Profile Section:

    • Go to Application > Analysis Profile > Edit Analysis Profile > New Profile.

image-20241213-160753.png

  1. Set Up the Profile:

    • Name: Input a name for this analysis profile in the Name text box.

    • Description: Provide a brief description of the profile's purpose. You have the option to mark this profile as the default by checking the corresponding box. Uncheck it if this is not the default profile.

    • Associated User: Enter the user associated with this profile.

  2. YAML Configuration:

    • Paste the YAML configuration into the provided text box. Below is a sample configuration:

image-20241213-161518.png

protocols:
  - protocol: HTTP2
    ports: [8080, 443]
  - protocol: VXLAN
    ports: [4789]
filters:
  exclude:
    - packets: "ARP, SSDP"
flags:
  enable_sequence_number_analysis: true

  1. Save and Close:

    • Save the profile and it will be available for use.

  • No labels