Documentation
LiveWireLiveWire Virtual User GuideDownload PDF
Exporting Data to LiveNX : Specify router mappings
Specify router mappings
Router mappings are used exclusively when you are exporting LiveFlow data to LiveNX, and are used by LiveNX to display aggregated traffic from different segments as separate interfaces per the router map entries you enter in the Router Mappings settings you configure in Omnipeek.
To add a router map entry for any adapter, you will need to specify an ifname (interface name) and a MAC address of the gateway or router separated by a forward slash (e.g., router_1/22:33:44:55:66:77). The ifname can be up to 15 characters, and can include letters, numbers, and underscores. This will tell LiveNX to display aggregated traffic from different segments as separate interfaces per the router map entries.
To find the MAC address of the gateway or router, the CLI can be used; otherwise, capture some traffic, or do a Forensics search and look at the Nodes view in hierarchical mode. The top level addresses should be the MAC addresses of the gateways and routers for each segment being captured.
NOTE: Although the CLI may display the MAC address using the abbreviated dot notation, the address must be formatted in full colon notation in the LiveWire Router Mapping entry dialog.