Home WTI User's Guides
cover
1. Introduction
2. Unit Description
2.1. Front Panel Indicators
2.2. Back Panel
3. Hardware Installation
3.1.1. AC Powered Units
3.1.2. DC Powered Units
3.2. Set-Up Switches
3.2.1. Default Baud Rate for Console Port
3.2.2. Default Baud Rate for PBX Port A PBX Port B and AUX Port
3.2.3. Dialback Security Mode
3.2.4. Console Port Password
3.2.5. Power Up Default
3.3. Reset to Defaults
3.4.1. PBX Inputs A and B and AUX Port
3.4.2. Modem Port
3.4.3. Console Port
3.4.4. Network Port
4. Configuration
4.1. Access to the Command Mode
4.2. Menu System Conventions
4.2.1. Script Access to Menu Functions
4.3. Set System Parameters
4.4. Port Configuration
4.4.1. PBX Port A and PBX Port B
4.4.2. Auxiliary Port Configuration
4.4.3. Console Port Configuration
4.4.4. Modem Port Configuration
4.4.4.1. Dialback Security
4.4.5. Network Port Configuration
5. Menu System Description
5.1. Software Tree
6. Status Screens
6.1. Buffer Status Screen
6.2. File List Screen
6.3. System Status Screen
6.4. Scheduled Action Status Screens
6.5. Dialback Security Status Screen
6.6. Data Filters Alarms Status Screen
6.7. Alarm Condition Status Screen
6.8. Alarm Filter Clue Status Screens
6.10. 80 Full Alarm Status Screen
6.11. Input Contact Alarm Status Screen
6.12. Reason for Action Screen
6.13. PBX Port Status Screens
6.14. Auxiliary Port Status Screen
6.15. Console Port Status Screen
6.16. Modem Port Status Screen
6.17. Network Port Status Screen
6.18. Network Status Screen
7. The Data Filters
7.1. The Data Filter Configuration Menus
7.2. Defining the Data Filter Format
7.3. Defining Data Filter Clues
7.4. Logical and Relational Operators
7.4.1. Logical AND-OR Conditions
7.4.1.1. Logical AND Conditions
7.4.1.2. Logical OR Conditions
7.4.2. The Contains String Operator
7.5. Real Time Variables
7.6. Assigning the Data Filter to a Port
7.6. Assigning the Data Filter to a Port
8. The Alarm Filters
8.1. Common Types of Suspect Phone Activity
8.2. The Alarm Configuration Menu
8.2.1. Default Alarm Filter Actions
8.3. The Alarm Filter Configuration Menus
8.4. Defining the Alarm Filter Format
8.5. Defining the Alarm Filter Clues
8.5.1. Alarm Clue Definition
8.5.2. Editing and Deleting Clues
8.6. Logical and Relational Operators
8.6.1. Logical AND-OR Conditions
8.6.1.1. Logical AND Conditions
8.6.1.2. Logical OR Conditions
8.6.2. The Contains String Operator
8.7. Real Time Variables
8.8. Assigning the Alarm Filter to a Port
8.9. Match Parameter Definition Examples
9. PBX Inactivity Alarms
9.1. Schedules and Timers
9.2. Enabling the PBX Inactivity Alarm
10. The 80 Full Alarm
11. The Input Contact Alarms
11.1. The Optional IO Monitor
11.2. Configuring the Input Contact Alarm
12. Alarm Actions
12.1. Alarm Actions for Alarm Filter Clues
12.2. Alarm Action Summary
12.2.1. None
12.2.2. Callout
12.2.3. Alphanumeric Page
12.2.4. Numeric Page
12.2.5. SNMP Trap
12.2.6. Output Contact
12.2.7. Console
12.3. The Auto Execute Function
13. Scheduled Actions
14. Saving NetLink Parameters
14.1. Saving Parameters to Flash Memory
14.2. Saving and Restoring Parameters from an ASCII File
14.2.1. Saving Parameters to an ASCII File
14.2.2. Saving Parameters to an ASCII File
14.3. Configuring NetLink with Saved Parameters
15. Buffer Functions
15.1. Memory Partitions and Shared Data
15.1.1. Partitions and Files
15.1.2. Setting the Partition
15.1.3. Releasing the Partition
15.2. Menu Driven Data Release
15.2.1. The Buffer Functions Menu
15.2.2. Read Session Parameters
15.3. Command Driven Data Release
15.3.1. Command B00
15.3.2. The B01 Command Line
15.3.3. Command B01 Examples
15.3.4. Other Commands Used During Data Release
15.4. Retrieving Data Using FTP Push
15.4.2. FTP Push Start Time
15.5. The FTP Server Feature
15.5.1. Configuring the FTP Server Feature
15.5.2. Retrieving Data Using FTP Server
15.5.3. File Names for the FTP Server Function
15.5.5. Response Messages Generated by the FTP Server Function
15.6. The Auto Delete Function
15.7. Zmodem Data Release Mode
16. Other Menu Functions
16.1. System Functions
16.1.1. Security Level
16.1.2. Pass-Through Mode
16.1.3. Monitor Mode
16.1.4. Clear Alarm Condition
16.1.5. Clear Alarm Counters
16.1.6. Download Parameters
16.1.7. Audit Trail
16.1.8. Upload Firmware
16.2. System Diagnostics
16.2.1. Load and Test Memory
16.2.2. Send Test Message
16.2.3. Test Pager
16.2.4. Send Test SNMP Trap
16.3. Default Parameters
17.3. Real Time Mode
17.4. Selective Read
17.5. Multiple Telnet Connections
17.5.1. Conflicts with Other Command Ports
18. Command Reference Guide
18.1. Command Mode Access
18.2. Command Syntax
18.3. Command Help
18.4. Command Summary
A. Specifications
B.2. Console Port
B.2.1. NetLink Console Port
B.2.2. NetLink Console Port
C. Cable Installation
D. Supervisor Functions and User Functions
D.1. Security Mode at Start Up
D.2. Dialback Security
D.3. Supervisor Mode and User Mode Functions
E. Alarm Clue Definition Tips
E.1. Headers Banners and Other Non-Data
E.1.1. The Comparative Operators
E.1.1.1. Limit Comparisons
E.1.1.2. Exclude Non-Data Characteristics
E.1.2. Exact Match with PBX Call Record Format
E.2. Programming Support
F. Customer Service
G. Bxx Command Summary
Index
2.1. Front Panel Indicators
PollCat NetLink

8.5. Defining the Alarm Filter Clues

 

Alarm Filter Clues describe specific criteria that NetLink will use to determine if each record should be counted as a match. Up to sixteen clues can be defined for each Alarm Filter.

When the Alarm Filter is assigned to an input port, all data received by that port will be monitored. NetLink will scan each record to determine if it matches any of the defined Alarm Clues. Records that match Alarm Clues are flagged and counted. When data is released to the polling device, alarm records can be sorted according to the name of the clue that was matched.

When defining Clues, the following factors should be considered:

•                      Clue Name: Names should describe the type of call the clue will monitor.

•                      Threshold Count: The number of times this type of call must occur in order to generate an alarm.

•                      • Match Parameters: The qualities that identify a suspect call. For example, long distance calls are easily recognized because they begin with the number one. Call characteristics are expressed in the form of an equation, which includes the following elements:

•          Variable(s): One or more variables from the Alarm Filter Format or one or more Real-Time variables. Variables determine which field(s) will be monitored. For example, the variable may represent the field for the number dialed.

•          Operator(s): One or more logical/relational operators, such as >, <, and = (see Section 8.6).

•          Parameter(s): A description of the characteristics that determine whether each record is counted as a match. For example, calls to a specific phone number, or calls made after a specific time.

•                      Action Parameters: A Series of parameters that determine how NetLink will react when the counter for this clue reaches the defined threshold. NetLink can send an SNMP Trap, call a modem or pager, contact the user via the Console Port, or open or close the optional Output Contacts. For more information on Alarm Actions, please refer to Section 12.

 

DEFINE OR EDIT CLUE:

1. Clue Name: (undefined)

2. Threshold: 0

3. Match Parameters: (undefined) (Cont.):

4. Action: None

5. Phone #: (undefined)

6. Pager ID 1: (undefined)

7. Pager ID 2: (undefined)

8. Pager ID 3: (undefined)

9. SNMP Mgmt: Manager #1

10. Output Contacts 1/2/3/4 -/-/-/­

11. Message: (undefined)

12. Auto Execute: Off

13. Execute Cmds: (undefined) (Cont.):

 

Enter Selection, Press <ESC> to return to previous menu ...

Figure 8.5: Alarm Clue Definition Menu

ht:0i�;driH>� @" 7.35pt; margin-left:1.0in;line-height:6.65pt'>Enter new format at cursor. <Space><Enter> to clear. Use upper case letters for fields, '-' between fields

 

|08:16|075|B.JOHNSON |IN | |00:55|00.00| |08:18|067|R.JONES |OUT|19495839514 |05:36|00.75| |08:20|092|J.SMITH |OUT|18008547226 |11:15|00.00| (undefined) ---------+---------+---------+---------+---------+---------+---------+--------­

Figure 8.3: Alarm Filter Format Definition Screen

1                     The format definition menu will show three sample records, followed by the previous format definition. Although the structure will differ for each PBX, records will look something like those shown in Figure 8.4.

2                     Define the Alarm Filter Format: The prompt at the bottom of the menu is used to define the Alarm Filter.

 

a) Press the dash key to indicate a field position you do not need to monitor. In Figure 8.4, dashes have been entered in the first four fields of the record.

b) When you reach a field that you need to monitor, key in the variable (any uppercase letter) that will be assigned to that position. For example, to assign "A" to the first seven digits of the number dialed, enter seven A's as shown in Figure 8.4. The same variable is repeated for each position in the field.

c) When you reach the last position you need to monitor, press [Enter]. NetLink will save the Alarm Filter Format and return to the Alarm Filter Configuration menu.

DEFINE FORMAT:

In order to assist the user during format definition, several data records and the previous format are displayed in the following order:

Data Records (If available) Previous Format (If available)

Enter new format at cursor. <Space><Enter> to clear. Use upper case letters for fields, '-' between fields

|08:16|075|B.JOHNSON |IN | |00:55|00.00| |08:18|067|R.JONES |OUT|19495839514 |05:36|00.75| |08:20|092|J.SMITH |OUT|18008547226 |11:15|00.00| (undefined) ---------+---------+---------+---------+---------+---------+---------+--------­----------------------------------AAAAAAA

Figure 8.4: Alarm Filter Format Definition Example