Add Custom Deep Packet Analytics Rules

You can add Deep Packet Analytics Rules to NetMon by uploading an existing rule or composing a new rule in the rule editor.

Upload an Existing Rule

To upload a Deep Packet Analytics Rule:

1. Open the NetMon Web Management interface.
2. On the top navigation bar, click Rules, and then click the Deep Packet Analytics Rules tab.
3. Under the Upload DPA Rule header, click Choose Files.
   The Open dialog box appears.
4. Locate and select the rule file that you want to add, and then click Open.
   The file appears at the bottom of the Upload DPA Rule table.
5. Click Upload to begin the transfer and save the rule, or click Remove to cancel the upload and return to the configuration page.
   The progress of the upload appears.
   • If the upload is successful, the new rule appears at the bottom of the table on the configuration page.
   • If the rule is invalid or the format is incorrect, an error appears. You need to correct the issue and upload the file again.

Compose a New Rule

To compose a new Deep Packet Analytics Rule:

1. Open the NetMon Web Management interface.
2. On the top navigation bar, click Rules, and then click the Deep Packet Analytics Rules tab.
3. Under the Compose New DPA Rule header, click Compose.
   The rule editor appears.
4. To change the editor in use, select the desired emulator next to Editor, as follows:
   • ace – https://github.com/ajaxorg/ace/wiki/Default-Keyboard-Shortcuts
   • vim – http://bullium.com/support/vim.html
   • emacs – https://www.gnu.org/software/emacs/refcards/pdf/refcard.pdf
5. Type the content of the rule in the editor panel on the left side of the window.
   For more information, see Deep Packet Analytics Rule Examples or the Programming in Lua guide.

6. Modify the author, scope, description, and whether or not the rule is enabled using the controls on the right side of the window.

   

   The rule name is only editable in the content of the rule itself. It cannot be changed in the Name box. If you attempt to rename a rule using the name of an existing rule, the changes are canceled and an error is displayed at the top of the rules table.
7. Click Save to commit your changes and close the editor, or click Cancel to undo any changes and return to the configuration page.