The type and size of the data Teleseer ingests contributes greatly to the topology generated by the application.
To generate the best possible topology, having both router/switch configurations as well as PCAP data will be your path to success. Projects containing only zeek data will not result in an ideal topology.
Follow the guidelines below to generate an optimal topology.
Routers and Switches
Teleseer ingests a variety of router and switch configurations. To get the best out of your ingest of a router or switch configuration, you should ingest the contents from the output of show run
or its equivalent.
PCAP data
To get a full picture of your network, it is recommended that you collect PCAP data. There is no limit on the size of file that Teleseer can ingest, however, due to network constraints, file system constraints, and usability, we recommend that files be no larger than 500 MB or 1 minute of live-streamed traffic.
When you tap your network, the general rule of thumb is to provide Teleseer with as much network context as possible.
In addition, it is recommended that your data contain both Layer 2 data as well as VLAN tags (if possible). Finally, it is recommended that you do not archive your files, as this may affect the ability to use the Teleseer carving tool.