Converting the SSL Visibility diagnostics files to a readable format

book

Article ID: 169136

calendar_today

Updated On:

Products

SSL Visibility Appliance Software

Issue/Introduction

This guide will show you how to download the Cygwin application and  what to install in order for you to use it  so that you can convert the results of the diagnostics files of the SSL Visibility to a human-readable format, and it will present the commands used and what to change in order for you to run them and use the results.

Resolution

Download the Cygwin app from http://cygwin.com/setup-x86_64.exe
 

User-added image

Choose direct download

User-added image

Select the install folder
 

User-added image

 Select the folder for Python

User-added image

Select the type of connection
 

User-added image


Click next till you get to this page

User-added image

 
 
 
Then search for OPENSSL and Python select to install all

User-added image

After that’s done go to the home file for Cygwin home folder (usually C:\cygwin64\home)
 
Open the downloaded zip file from
Symantec for your SSLV appliance or in the .rar file attached to this KB:

  • sslsessions-1.6.9.zip
  • ssldiags-1.1.0.zip

Decompress them in the user home folder so that it looks like this:
 

User-added image

 


Now in order to process the diagnostic files, we need to decompress them inside the ssldiags folder like this:
 

 

User-added image

 
There you see the name of the example folder "diagnostics-2915450072-20160425T164652" 
After that’s done you need to select what type of diagnostic file you wish to process inside the diagnostics folder:

 
User-added image

There we select the stats folder to choose what statistic we are going to process
 

  • Host_stats
  • Nfp0_stats
  • Platafirm_interface_stats
  • Plataform_status_stats
  • Ssl_stats

Once we chose what we want to process we select its header. If we chose "ssl_stats" we select: 

User-added image

“ssl_stats_names-20160422T193210+0000.csv”

(Keep in mind that the file will always start with the name of the stats, for example, ssl_stats_name-xxxxxxxxxxxxxxxxxxxxxxxxxx.csv, or host_stats_names-xxxxxxxxxxxxxxxxxxxxxxxxxx.csv, or nfp0_stats_names-xxxxxxxxxxxxxxxxxxxxxxxxxx.csv, etc. What you select will depend on what you want to convert.)

Open Cygwin and access the ssldiags-1.1.0 with “cd ssldiags-1.1.0”

User-added image
 

There run this command:

python setup.py install

The command will install the ssldiagnostics scripts in the selected folder and using this command will start the process to see the diagnostics:

python ssldiags.py -i "Diagnostic FOLDER name"/stats -p “Name of what we want to process” -c  “HEADERSFILE.csv” -o “OUTPUT FILE NAME.CSV”
 
where the yellow   "Diagnostic FOLDER name"  is the name of the folder, usually  
xxxxxxxxxxx-xxxxxxxxxxxxx  
the   green "Name of what we want to process”  represents the names of the statistics you want to convert (host_stats, SSL_stats,etc)
the orange “HEADERSFILE.csv”  is the header name of the statistic to convert, for example, ssl_stats_names-20160422T193210+0000.csv
and blue “OUTPUT FILE NAME.CSV” the is the name of the destination file.

Example:

python
ssldiags.py -i diagnostics-2915450072-20160425T164652/stats -p ssl_stats -c  ssl_stats_names-20160422T193210+0000.csv -o ssl_STATS_TEST.csv

That command will start to process the .bin files like this:

User-added image

 
When it’s finished you will see the output files in the ssldiags-1.1.0 folder:

User-added image

 
It is the same process with the other stats; you just have to find the CSV header file for the stats and run the same command modifying the highlighted section of the command.
 
For the SSL sessions logs, Cygwin needs to have been installed with openSSL. We decompress the SSL session logs file in the sslsessions-1.6.9 folder like so:

User-added image


 using these two commands in the folder sslsessions-1.6.9/:
User-added image
                    python setup.py install

and the command to make the file readable:

python sslsessions.py -S ssl_session_log-4713380011-20150925T185720 -x -m -c CN -5 -M csv –l 25000 -V 3.8 .                      

 
where:
The section highlighted in blue is the name of the folder for the uncompressed SSL sessions
The section highlighted in green is the number of lines that you wish for the file to be (ex. If it's 500 the program is going to create several 500 lines files)
And the section highlighted in yellow represents the output folder for the SSL sessions, the “.” being the sslsessions-1.6.9 folder.
The section highlighted in red represents the version of the SSL Visibility (
eg: 3.8 3.9.4, 3.11.2.1 , etc).

Then go to  the sslsessions-1.6.9 folder with “cd  sslsessions-1.6.9” in Cygwin, and there run the command. Once the command has finished its run you will find the files in the folder like so:

User-added image


 where thesessions-data.csv contains the SSL session statistics and, as the name implies, the session-header.csv contains the names of the columns for the SSL session logs  statistics 


 

Attachments