Monday, November 15, 2010

Tealeaf Capture Sessions for new website

Steps to add new website to track sessions through Tealeaf.

1) Login to PCP appliance URL.
http://ip_addr:8080/interface.php

2) Navigate to Filter Rules section.
Specify Host: {ip_address_of _website_to monitor} Port1: 80 Port2: 443
Click Add and Save changes.
If you are not using SSL, no need to add port 443.

3) Setup SSL
If you are monitoring SSL, you need to have the private keys for decryption.
Login into physical host of the appliance.
It is recommended you have the keys in PEM format.
If you have private key in .key file, simply rename the file from .key to .pem extension.
Copy the private keys to /usr/local/ctccap/etc directory in Tealeaf capture device.

Execute these commands:
cd /usr/local/ctccap/etc
mv mycert.key mycert.pem (optional)
tealeaf pem2ptl mycert.pem
PEM  file will be converted to PTL format.
On successful conversion, you should see the message
pem2ptl: notice: Successfully converted PEM file "mycert.pem" to PTL file: mycert.ptl

4) Login to Capture device console again.
http://ip_addr:8080/keys.php
If you are already in the console, navigate to SSL Keys
Select private keys to view -> Check Loaded

Add a private key:
Label:myappname File:/usr/local/ctccap/etc/mycert.ptl
Click Add and Save changes.

Optional: You can also verify the configuration in /usr/local/ctccap/etc/ctc-conf.xml.

5) Restart Tealeaf capture device
# tealeaf stop capture
# tealeaf start capture


6) Your new website sessions should now be tracked in Tealeaf.
Login into the Tealeaf portal and search for your sessions. Restart portal just in case you have any issues.

0 Comments:

Post a Comment

Subscribe to Post Comments [Atom]

<< Home

Newer›  ‹Older