CloudShark Support

Importing Capture Files

The five ways capture files can be imported to a CloudShark appliance are:

Drag and Drop

Files can be dragged from any modern operating system’s file explorer window right onto the Upload Files box on the CloudShark capture file index page (for users that are logged in) or CloudShark login page (for guests, when guest access is enabled). Note that this feature supports multiple files - logged-in users can choose multiple files and Drag and Drop them into CloudShark. They will be uploaded all at the same time. Drag & Drop of a Folder is not supported.

File Select

Instead of dragging files into the “Upload Files” box, files can also be uploaded by clicking on the Drag and Drop box. This will open the browser’s file selector box, allowing you to navigate through the file system and select one or more capture files to upload. Browsers that do not support Drag & Drop will only be able to use this method.

Import from URL

Users can also paste the HTTP or FTP URL of a capture file into CloudShark by clicking the Import from URL box. Files imported from a URL can be located anywhere the CloudShark appliance has network access to, including the Internet and other local or remote networks.

Note that CloudShark supports importing via URL of files secured with basic and digest HTTP authentication and FTP authentication as well. The authentication credentials can be passed along in the URL using the following syntax:

http://username:password@server/path/file.pcap

or:

ftp://username:password@server/path/file.pcap

The credentials used to retrieve the URL will be stored within the CloudShark database, however they are hidden from users once the file has been imported. In addition, passwords with a literal ‘@’ in them are not supported due to the manner in which CloudShark handles URL style passwords.

URLs may contain special characters, provided they are properly encoded (ie spaces must be replaced with ‘%20’, ‘&’ characters with ‘%26’, etc.). More information on URL encoding rules can be found here.

Auto-Import

Files can also be imported using the Auto-Import feature. This feature allows specific directories on the system to be monitored by the CloudShark appliance. Any capture files placed in these directories will be automatically processed and imported using the settings specified by the CloudShark administrator.

The CloudShark administrator is the only user that can configure auto-import directories. Auto-import files can be assigned to a specific user and group and can be given specific tags. Please see the Auto-Imports article in the CloudShark Administration chapter of this document for more information.

CloudShark will only descend into sub-directories contained within designated auto-import locations once, when the sub-folder is added to the auto-import location. Files subsequently placed into any sub-directories will not be indexed automatically by CloudShark. CloudShark’s auto-importer should be explicitly configured to watch any sub-directories that are expected to receive files.

API Tokens

Files can also be imported directly by scripts or other test tools using CloudShark’s API. Please see the The CloudShark API article for more information.

Files are always owned by the user that uploaded them. The CloudShark administrator can modify the owner of any file at any time. If guest access is enabled, files uploaded by any non-CloudShark users will be owned by the guest system account.

A status box will appear whenever capture files are uploaded. If any issues are encountered while uploading a file, an error message will be displayed, and the CloudShark appliance will continue to process and upload all subsequent files. File upload failures are often related to a few common issues such as files that containing no packets or files that are of the wrong type (ie not recognized capture file formats).

Guests are subject to certain upload restrictions. Guests are only allowed to upload one file at a time using the Drag and Drop and File Select features, whereas CloudShark users can upload multiple files simultaneously.

About CloudShark

CloudShark is made by QA Cafe, a technology company based in Portsmouth, NH. Our passion for packet captures has grown out of our other product CDRouter.

Get in touch via our Contact us page or by following us on your favorite service: