Surveyor User's Guide

4-26
Surveyor
User’s Guide
Assigning TCP or UDP Ports to Protocol Parsers
Use the ANALYSIS.INI file to assign any built-in Surveyor parser to a TCP or
UDP port. This is useful when a network is running a protocol/application over a
TCP or UDP port that is not using the default port. The assignment of a proper
parser allows Surveyor to properly decode and analyze the packets associated with
the TCP or UDP port.
The assigning of parsers does not effect how the information is displayed in monitor
views. See “Assigning Protocol Names” for information on assigning names for
monitor views.
The ANALYSIS.INI file is located in your Surveyor installation directory. Exam-
ples of usage are included in the file.
ANALYSIS.INI Format
The ANALYSIS.INI file has two sections, TCP and UDP. A section contains one
or more entries with the following format:
mapping=<port num>,<ip addr>,<parser name>,<name>
<port num> is any valid 2 byte value that represents a TCP or
UDP port value. It identifies the protocol, by port
number, to be parsed in Surveyor’s decode views.
<ip addr> is a valid IP address in dotted decimal notation. This
field can have an asterisk (*) to represent all IP
addresses.
<parser name> is the name of a valid Surveyor built-in parser. See
Parser Names for a list of parsers.
<name> is a name that will used to identify the mapping.
Example 1
Assume that the network administrator configured Oracle’s TNS protocol to use
TCP port 1029. This port value is different from the default value for TNS, which is
1521. The entry in the ANALYSIS.INI would be:
[TCP]
mapping=1029,*,TNS,Oracle TNS
“Oracle TNS” is the string that will be used in Surveyor’s displays to identify this
decode.
Example 2
Assume that the network administrator configured Sybase’s TDS protocol to use
TCP port 11964. This value is different from the value for TDS which is 2048. Fur-