rough estimate of how long the capture takes
@@ -263,7 +263,7 @@ if db_go; then
echo "At this point it is worth watching the Faucet logs, which can be tailed from '/var/log/faucet/faucet.log'"
echo "If the Faucet logs show L2 learned records that don't have valid IP addresses for L3 (most likely) then you'll have to wait for the expiration timeout of Faucet, which by default is 5 minutes. Once Faucet has 0 recently active hosts (you'll see messages in the logs), then trying browsing to files using 'w3m' again on h2. That should trigger a relearn with valid L3 IP addresses on Faucet, at which point Poseidon will pick them up."
echo ""
- echo "The Poseidon logs should start picking up the 2 hosts and begin capturing traffic. Once the hosts are moved into the mirroring section of the Poseidon logs you can look at the faucet.yaml file again and see that it got updated to start mirroring traffic. Additionally if you do 'docker ps' you still start to see ncapture containers running which are creating the PCAP files of the mirrored traffic. You can find those PCAP files in '/opt/vent_files'. Eventually after the captures have been processed and analzyed by the machine learning portion of Poseidon, you'll see results of the machine learning classification in the poseidon logs."
+ echo "The Poseidon logs should start picking up the 2 hosts and begin capturing traffic. Once the hosts are moved into the mirroring section of the Poseidon logs you can look at the faucet.yaml file again and see that it got updated to start mirroring traffic. Additionally if you do 'docker ps' you still start to see ncapture containers running which are creating the PCAP files of the mirrored traffic. You can find those PCAP files in '/opt/vent_files'. Eventually after the captures have been processed and analzyed by the machine learning portion of Poseidon (about 15 minutes), you'll see results of the machine learning classification in the poseidon logs."
echo ""
echo "Finally, you can visualize the network that Poseidon sees using CRviz, which can be accessed with 'poseidon visualize'"
echo ""
