Skip to main content

Garland INT1G10CSASP SOP

Prerequisites​

  • Serial to USB Cable
  • 4x patch cables
  • Garland TAP (INT1G10CSASP)
  • Power Cable
  • 1G Copper SFP
  • MIP

Pre-Execution Checks​

  1. Make sure to test functionality of TAP with specific SFPs before you implement on Mission Partner system
    1. Ex. Set up successful ping between two devices and then implement your TAP solution to verify you are still getting a successful ping
      1. Verify you can capture the traffic from the analysis ports using the steps listed in the Steps section
  2. If you need to configure or verify configuration use USB to serial dongle
    1. 19200 bps everything else default
    2. Default vendor user is admin password is gtadmin1

Steps​

Setup MIP​

  1. identify the interface you're going to use using ip link OR the setup script
    1. use ip link to identify interfaces
    2. use the 262COS RHEL Setup Script found on the desktop
      1. choose [3] Configure RHEL networking
      2. take note of the interfaces listed at the top
      3. choose [R] refresh displayed status
      4. take note of the interfaces listed at the top
  2. Set MIP NIC IPv4 and IPv6 settings to disable
  3. If you're using external storage, mount and get that drive's path (lsblk)

Setup Tap​

  1. Configure network pair at correct speed.
  2. You want to match the speed of the network traffic you are attempting to TAP with that of your network pair. For example, if you are attempting to TAP the connection of a Workstation you can login and check the speed of the Network Interface Card.
note

The Garland Tap can be configured to speeds of 10M, 100M and 1G. To change the speed on a network pair you must use putty to serial into the TAP

Bits per second:	19200 
Data Bits:		    8 
Parity:			    None 
Stop:			    1 
Flow Control:		None

Example of editing the speed of network pairs can be done by following the Main Menu Prompts​

  1. Select Change/View Configuration
    Login Screen

  2. Select Setup Network (TAP) Ports
    Config Menu

  3. Select Network Pair 1&2
    Setup Ports

  4. Select Desired Speed
    Setup Pair

note

The Garland TAP monitors port on Port 9 and 10. Each of these ports requires an SFP.

The Garland TAP has the flexability to send multiple network pairs to one or both monitor ports. Below is an example of monitor port 9 receiving all data from ports 1 - 4.

MPN

Run tcpdump​

  1. To run tcpdump you must know what interface you are using to connect to the TAP. There are multiple ways to do this: 
    nmcli 
    ip a 
    lspci 
    lshw
  2. Make sure you name the file something that you’ll be able to make out:
  • When the PCAP was started
  • Where the PCAP was started
  • What system/network the PCAP is capturing

Example of tcpdump command:

sudo tcpdump -nn -i eth0 -w 20250430_Guam_Win10Pro.pcap
note

-nn simply makes sure your MIP is not trying to resolve hostnames; -w save capture to file