NET TRAFFIC
Logicube Falcon
®
-Neo User’s Manual 129
Segment Size – Allows the user to set the size of the captured segment (pcapng file). The options
available are 2 GB, 4 GB, 8 GB, 16 GB, and Whole Disk.
Number of Segments – Allows the user to select how many segment files to create. For example,
if the Segment Size is set to 4 GB and the Number of Segments is set to 2, two segment files will
be created. The options available are: 2, 4, 8, 16, and Whole Disk.
Segment Ring Buffer – Determines what the Falcon-NEO will do when it reaches the total
number of segments on all selected repositories (Destination drives).
ON – When this is set to ON, the Falcon-NEO will continuously capture network traffic
until the task is aborted. For example, if the Number of Segments is set to 2 and the
Segment Ring Buffer is set to ON, after the 2
nd
segment is finished, it will delete the 1
st
segment, then continue capturing network traffic, and create a new first segment file. If
more than one repository is selected, it will keep cycling through both repositories,
overwriting the oldest segment until the task is aborted.
OFF – When this is set to OFF, once the Falcon-NEO reaches the number of segments set
and the last repository is filled, it will stop the task.
Chain Destinations – Allows the user to span the Net Traffic to File images over two or
more repositories (such as Destination drives) continuously. When this is set to YES, all
selected Destination drives will be used in the order they were selected. When the drive
on the first repository is full, it will continue with the next selected repository.
To enable Chain Destinations, Ring Buffer must be set to OFF.
Drives must be formatted (by the Falcon-NEO) before starting
the Net Traffic to File Imaging task.
After the first repository is full, the Destination drive on that repository can be
swapped with a new Destination drive.